Traffic Trace Info
DumpFile: 201308311400.dump
FileSize: 3265.95MB
Id: 201308311400
StartTime: Sat Aug 31 14:00:01 2013
EndTime: Sat Aug 31 14:15:00 2013
TotalTime: 899.92 seconds
TotalCapSize: -1635.06MB CapLen: 96 bytes
# of packets: 52756259 (13983.61MB)
AvgRate: 130.25Mbps stddev:28.85M
IP flow (unique src/dst pair) Information
# of flows: 29625226 (avg. 1.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.3% 1.3% 1.2% 1.2% 1.2% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 23614644
Top 10 bandwidth usage (bytes/total in %):
20.0% 15.1% 5.2% 3.9% 2.8% 2.8% 2.7% 2.7% 2.3% 2.1%
# of IPv6 addresses: 10395
Top 10 bandwidth usage (bytes/total in %):
36.0% 24.8% 6.8% 4.6% 4.6% 4.4% 4.3% 4.2% 4.2% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308311400.pktlen.png)
detailed numbers
[ 32- 63]: 35886183
[ 64- 127]: 7247492
[ 128- 255]: 750147
[ 256- 511]: 626175
[ 512- 1023]: 659690
[ 1024- 2047]: 7586572
Protocol Breakdown
![[protocol breakdown chart]](201308311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52756259 (100.00%) 14662877475 (100.00%) 277.94
ip 51446057 ( 97.52%) 13842732732 ( 94.41%) 269.07
tcp 13880590 ( 26.31%) 10388389501 ( 70.85%) 748.41
http(s) 6358364 ( 12.05%) 8145584718 ( 55.55%) 1281.08
http(c) 4407653 ( 8.35%) 865431833 ( 5.90%) 196.35
squid 24742 ( 0.05%) 18959417 ( 0.13%) 766.28
smtp 80418 ( 0.15%) 18266994 ( 0.12%) 227.15
ftp 70253 ( 0.13%) 21304146 ( 0.15%) 303.25
pop3 3523 ( 0.01%) 3023157 ( 0.02%) 858.12
imap 2212 ( 0.00%) 235163 ( 0.00%) 106.31
telnet 3384 ( 0.01%) 1803175 ( 0.01%) 532.85
ssh 1269512 ( 2.41%) 201280736 ( 1.37%) 158.55
dns 1697 ( 0.00%) 273264 ( 0.00%) 161.03
bgp 552 ( 0.00%) 146794 ( 0.00%) 265.93
napster 3 ( 0.00%) 180 ( 0.00%) 60.00
rtsp 18 ( 0.00%) 3031 ( 0.00%) 168.39
icecast 21981 ( 0.04%) 1679451 ( 0.01%) 76.40
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1636277 ( 3.10%) 1110397382 ( 7.57%) 678.61
udp 2232222 ( 4.23%) 1063909296 ( 7.26%) 476.61
dns 663251 ( 1.26%) 269216392 ( 1.84%) 405.90
realaud 8 ( 0.00%) 694 ( 0.00%) 86.75
halflif 12 ( 0.00%) 980 ( 0.00%) 81.67
starcra 18 ( 0.00%) 1559 ( 0.00%) 86.61
everque 65 ( 0.00%) 8724 ( 0.00%) 134.22
unreal 12 ( 0.00%) 871 ( 0.00%) 72.58
quake 35 ( 0.00%) 2775 ( 0.00%) 79.29
cuseeme 6 ( 0.00%) 508 ( 0.00%) 84.67
other 1568067 ( 2.97%) 794359406 ( 5.42%) 506.59
icmp 34808732 ( 65.98%) 2160673181 ( 14.74%) 62.07
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 198961 ( 0.38%) 27101086 ( 0.18%) 136.21
ip6 235941 ( 0.45%) 178799140 ( 1.22%) 757.81
other 89427 ( 0.17%) 23841368 ( 0.16%) 266.60
frag 371627 ( 0.70%) 482066617 ( 3.29%) 1297.18
ip6 1310202 ( 2.48%) 820144743 ( 5.59%) 625.97
tcp6 1035488 ( 1.96%) 591601936 ( 4.03%) 571.33
http(s) 457262 ( 0.87%) 538924897 ( 3.68%) 1178.59
http(c) 127708 ( 0.24%) 11873719 ( 0.08%) 92.98
smtp 54 ( 0.00%) 13363 ( 0.00%) 247.46
ftp 119 ( 0.00%) 17350 ( 0.00%) 145.80
pop3 28 ( 0.00%) 3181 ( 0.00%) 113.61
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 281 ( 0.00%) 46087 ( 0.00%) 164.01
bgp 94 ( 0.00%) 24495 ( 0.00%) 260.59
other 449870 ( 0.85%) 40686394 ( 0.28%) 90.44
udp6 82494 ( 0.16%) 19058916 ( 0.13%) 231.03
dns 78725 ( 0.15%) 18647455 ( 0.13%) 236.87
realaud 2 ( 0.00%) 188 ( 0.00%) 94.00
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 2 ( 0.00%) 206 ( 0.00%) 103.00
quake 2 ( 0.00%) 214 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 3761 ( 0.01%) 410648 ( 0.00%) 109.19
icmp6 21262 ( 0.04%) 2632339 ( 0.02%) 123.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 170928 ( 0.32%) 206847472 ( 1.41%) 1210.14
tcpdump file: 201308311400.dump.gz (1096.38 MB)