Traffic Trace Info
DumpFile: 200407201400.dump
FileSize: 511.10MB
Id: 200407201400
StartTime: Tue Jul 20 14:00:01 2004
EndTime: Tue Jul 20 14:15:01 2004
TotalTime: 899.94 seconds
TotalCapSize: 401.51MB CapLen: 96 bytes
# of packets: 7182177 (2828.41MB)
AvgRate: 26.36Mbps stddev:0.69M
IP flow (unique src/dst pair) Information
# of flows: 638443 (avg. 11.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.0% 1.2% 1.2% 1.1% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 391941
Top 10 bandwidth usage (bytes/total in %):
11.0% 4.5% 4.4% 4.4% 3.4% 3.1% 2.9% 2.7% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200407201400.pktlen.png)
detailed numbers
[ 16- 31]: 39125
[ 32- 63]: 2504352
[ 64- 127]: 2203857
[ 128- 255]: 333609
[ 256- 511]: 225245
[ 512- 1023]: 339471
[ 1024- 2047]: 1536518
Protocol Breakdown
![[protocol breakdown chart]](200407201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7182177 (100.00%) 2965803469 (100.00%) 412.94
ip 7121060 ( 99.15%) 2963943545 ( 99.94%) 416.22
tcp 6182132 ( 86.08%) 2829829749 ( 95.42%) 457.74
http(s) 1520432 ( 21.17%) 1565278067 ( 52.78%) 1029.50
http(c) 2157377 ( 30.04%) 264006592 ( 8.90%) 122.37
squid 10788 ( 0.15%) 7595363 ( 0.26%) 704.06
smtp 264466 ( 3.68%) 82388772 ( 2.78%) 311.53
nntp 148350 ( 2.07%) 129846692 ( 4.38%) 875.27
ftp 33298 ( 0.46%) 13709791 ( 0.46%) 411.73
pop3 6641 ( 0.09%) 1454016 ( 0.05%) 218.95
imap 1592 ( 0.02%) 124326 ( 0.00%) 78.09
telnet 2166 ( 0.03%) 230306 ( 0.01%) 106.33
ssh 3893 ( 0.05%) 626991 ( 0.02%) 161.06
dns 1435 ( 0.02%) 96008 ( 0.00%) 66.90
bgp 175 ( 0.00%) 61348 ( 0.00%) 350.56
napster 19424 ( 0.27%) 10961665 ( 0.37%) 564.34
realaud 37 ( 0.00%) 2416 ( 0.00%) 65.30
rtsp 42811 ( 0.60%) 9915545 ( 0.33%) 231.61
icecast 3090 ( 0.04%) 405709 ( 0.01%) 131.30
hotline 8 ( 0.00%) 508 ( 0.00%) 63.50
other 1965388 ( 27.36%) 743097625 ( 25.06%) 378.09
udp 640311 ( 8.92%) 114425990 ( 3.86%) 178.70
dns 339795 ( 4.73%) 43568028 ( 1.47%) 128.22
realaud 10030 ( 0.14%) 5269850 ( 0.18%) 525.41
halflif 1 ( 0.00%) 802 ( 0.00%) 802.00
everque 1 ( 0.00%) 67 ( 0.00%) 67.00
quake 1 ( 0.00%) 86 ( 0.00%) 86.00
other 290385 ( 4.04%) 65583606 ( 2.21%) 225.85
icmp 229042 ( 3.19%) 17281986 ( 0.58%) 75.45
ip6 224 ( 0.00%) 46496 ( 0.00%) 207.57
other 69351 ( 0.97%) 2359324 ( 0.08%) 34.02
frag 35 ( 0.00%) 17656 ( 0.00%) 504.46
tcpdump file: 200407201400.dump.gz (203.35 MB)