Traffic Trace Info
DumpFile: 200408091400.dump
FileSize: 644.27MB
Id: 200408091400
StartTime: Mon Aug 9 14:00:00 2004
EndTime: Mon Aug 9 14:15:00 2004
TotalTime: 900.29 seconds
TotalCapSize: 508.74MB CapLen: 96 bytes
# of packets: 8882038 (2670.02MB)
AvgRate: 24.88Mbps stddev:1.37M
IP flow (unique src/dst pair) Information
# of flows: 1729074 (avg. 5.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 3.0% 2.0% 1.9% 1.5% 1.5% 1.5% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 671757
Top 10 bandwidth usage (bytes/total in %):
10.5% 6.6% 6.6% 4.6% 3.6% 3.6% 3.6% 3.4% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200408091400.pktlen.png)
detailed numbers
[ 16- 31]: 43022
[ 32- 63]: 5093224
[ 64- 127]: 1667263
[ 128- 255]: 214900
[ 256- 511]: 250864
[ 512- 1023]: 214947
[ 1024- 2047]: 1397818
Protocol Breakdown
![[protocol breakdown chart]](200408091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8882038 (100.00%) 2799715339 (100.00%) 315.21
ip 8820310 ( 99.31%) 2797850301 ( 99.93%) 317.21
tcp 7885928 ( 88.79%) 2617368581 ( 93.49%) 331.90
http(s) 1108102 ( 12.48%) 1220745537 ( 43.60%) 1101.65
http(c) 1269684 ( 14.29%) 155661216 ( 5.56%) 122.60
squid 4406 ( 0.05%) 453317 ( 0.02%) 102.89
smtp 160220 ( 1.80%) 45886526 ( 1.64%) 286.40
nntp 204860 ( 2.31%) 184060592 ( 6.57%) 898.47
ftp 52675 ( 0.59%) 30651392 ( 1.09%) 581.90
pop3 3185 ( 0.04%) 838050 ( 0.03%) 263.12
imap 915 ( 0.01%) 71552 ( 0.00%) 78.20
telnet 3036 ( 0.03%) 1151951 ( 0.04%) 379.43
ssh 3856 ( 0.04%) 767510 ( 0.03%) 199.04
dns 1543 ( 0.02%) 115401 ( 0.00%) 74.79
bgp 182 ( 0.00%) 59755 ( 0.00%) 328.32
napster 294 ( 0.00%) 35008 ( 0.00%) 119.07
realaud 2035 ( 0.02%) 122100 ( 0.00%) 60.00
rtsp 49043 ( 0.55%) 23012066 ( 0.82%) 469.22
icecast 12869 ( 0.14%) 807204 ( 0.03%) 62.72
other 5008309 ( 56.39%) 952903051 ( 34.04%) 190.26
udp 599747 ( 6.75%) 158409304 ( 5.66%) 264.13
dns 457564 ( 5.15%) 109006385 ( 3.89%) 238.23
realaud 4189 ( 0.05%) 1209994 ( 0.04%) 288.85
halflif 1230 ( 0.01%) 135277 ( 0.00%) 109.98
quake 15 ( 0.00%) 1645 ( 0.00%) 109.67
cuseeme 1 ( 0.00%) 79 ( 0.00%) 79.00
other 135442 ( 1.52%) 46543898 ( 1.66%) 343.64
icmp 268127 ( 3.02%) 19260554 ( 0.69%) 71.83
ipsec 484 ( 0.01%) 121512 ( 0.00%) 251.06
ip6 1479 ( 0.02%) 495113 ( 0.02%) 334.76
other 64545 ( 0.73%) 2195237 ( 0.08%) 34.01
frag 18584 ( 0.21%) 24217786 ( 0.87%) 1303.15
tcpdump file: 200408091400.dump.gz (235.90 MB)