Traffic Trace Info
DumpFile: 200405291400.dump
FileSize: 428.08MB
Id: 200405291400
StartTime: Sat May 29 14:00:00 2004
EndTime: Sat May 29 14:15:00 2004
TotalTime: 899.88 seconds
TotalCapSize: 336.48MB CapLen: 96 bytes
# of packets: 6003289 (2522.60MB)
AvgRate: 23.52Mbps stddev:1.16M
IP flow (unique src/dst pair) Information
# of flows: 803163 (avg. 7.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.4% 4.7% 4.5% 3.9% 3.4% 3.3% 3.2% 1.8% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 651948
Top 10 bandwidth usage (bytes/total in %):
8.6% 8.6% 8.2% 8.2% 4.8% 4.8% 4.6% 4.0% 4.0% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200405291400.pktlen.png)
detailed numbers
[ 16- 31]: 26162
[ 32- 63]: 2640688
[ 64- 127]: 1329043
[ 128- 255]: 141559
[ 256- 511]: 149729
[ 512- 1023]: 316431
[ 1024- 2047]: 1399677
Protocol Breakdown
![[protocol breakdown chart]](200405291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6003289 (100.00%) 2645139710 (100.00%) 440.62
ip 5964148 ( 99.35%) 2643953169 ( 99.96%) 443.31
tcp 5271731 ( 87.81%) 2518061544 ( 95.20%) 477.65
http(s) 928039 ( 15.46%) 1005050900 ( 38.00%) 1082.98
http(c) 1325137 ( 22.07%) 135514580 ( 5.12%) 102.26
squid 6304 ( 0.11%) 687926 ( 0.03%) 109.13
smtp 112926 ( 1.88%) 27502802 ( 1.04%) 243.55
nntp 241282 ( 4.02%) 228719957 ( 8.65%) 947.94
ftp 10396 ( 0.17%) 1796018 ( 0.07%) 172.76
pop3 1460 ( 0.02%) 353230 ( 0.01%) 241.94
imap 294 ( 0.00%) 22933 ( 0.00%) 78.00
telnet 693 ( 0.01%) 76394 ( 0.00%) 110.24
ssh 5593 ( 0.09%) 4427727 ( 0.17%) 791.66
dns 311 ( 0.01%) 23089 ( 0.00%) 74.24
bgp 193 ( 0.00%) 85201 ( 0.00%) 441.46
napster 26945 ( 0.45%) 24843571 ( 0.94%) 922.01
rtsp 78587 ( 1.31%) 61761983 ( 2.33%) 785.91
icecast 3391 ( 0.06%) 245039 ( 0.01%) 72.26
other 2529598 ( 42.14%) 1026927641 ( 38.82%) 405.96
udp 402175 ( 6.70%) 106181001 ( 4.01%) 264.02
dns 213071 ( 3.55%) 29095949 ( 1.10%) 136.56
realaud 24704 ( 0.41%) 17279052 ( 0.65%) 699.44
quake 1 ( 0.00%) 851 ( 0.00%) 851.00
other 164306 ( 2.74%) 59785831 ( 2.26%) 363.87
icmp 247991 ( 4.13%) 18232246 ( 0.69%) 73.52
ip6 240 ( 0.00%) 49503 ( 0.00%) 206.26
other 42011 ( 0.70%) 1428875 ( 0.05%) 34.01
frag 5899 ( 0.10%) 5381538 ( 0.20%) 912.28
tcpdump file: 200405291400.dump.gz (162.80 MB)