Traffic Trace Info
DumpFile: 200408141400.dump
FileSize: 591.35MB
Id: 200408141400
StartTime: Sat Aug 14 14:00:00 2004
EndTime: Sat Aug 14 14:15:00 2004
TotalTime: 900.07 seconds
TotalCapSize: 465.77MB CapLen: 96 bytes
# of packets: 8229531 (2180.64MB)
AvgRate: 20.32Mbps stddev:2.80M
IP flow (unique src/dst pair) Information
# of flows: 1979707 (avg. 4.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.7% 4.1% 2.1% 1.5% 1.5% 1.3% 1.2% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 752232
Top 10 bandwidth usage (bytes/total in %):
10.0% 10.0% 9.7% 4.6% 4.6% 4.2% 4.2% 3.0% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200408141400.pktlen.png)
detailed numbers
[ 16- 31]: 33612
[ 32- 63]: 5026660
[ 64- 127]: 1403341
[ 128- 255]: 229310
[ 256- 511]: 254065
[ 512- 1023]: 222076
[ 1024- 2047]: 1060467
Protocol Breakdown
![[protocol breakdown chart]](200408141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8229531 (100.00%) 2286568523 (100.00%) 277.85
ip 8180118 ( 99.40%) 2285071468 ( 99.93%) 279.34
tcp 6949436 ( 84.45%) 1998464411 ( 87.40%) 287.57
http(s) 645708 ( 7.85%) 698654829 ( 30.55%) 1082.00
http(c) 617631 ( 7.51%) 78840760 ( 3.45%) 127.65
squid 11073 ( 0.13%) 6241710 ( 0.27%) 563.69
smtp 242434 ( 2.95%) 64713003 ( 2.83%) 266.93
nntp 241534 ( 2.93%) 228202288 ( 9.98%) 944.80
ftp 22320 ( 0.27%) 13729448 ( 0.60%) 615.12
pop3 2116 ( 0.03%) 704390 ( 0.03%) 332.89
imap 242 ( 0.00%) 19140 ( 0.00%) 79.09
telnet 1377 ( 0.02%) 165756 ( 0.01%) 120.37
ssh 4063 ( 0.05%) 1904261 ( 0.08%) 468.68
dns 1260 ( 0.02%) 86262 ( 0.00%) 68.46
bgp 181 ( 0.00%) 63230 ( 0.00%) 349.34
napster 1207 ( 0.01%) 136543 ( 0.01%) 113.13
realaud 7 ( 0.00%) 849 ( 0.00%) 121.29
rtsp 32061 ( 0.39%) 21356020 ( 0.93%) 666.11
icecast 1155 ( 0.01%) 444583 ( 0.02%) 384.92
other 5124552 ( 62.27%) 883181858 ( 38.62%) 172.34
udp 883276 ( 10.73%) 234387224 ( 10.25%) 265.36
dns 384588 ( 4.67%) 82657887 ( 3.61%) 214.93
realaud 2579 ( 0.03%) 246246 ( 0.01%) 95.48
everque 11 ( 0.00%) 732 ( 0.00%) 66.55
quake 4 ( 0.00%) 257 ( 0.00%) 64.25
other 495097 ( 6.02%) 150397867 ( 6.58%) 303.77
icmp 246634 ( 3.00%) 18341470 ( 0.80%) 74.37
ip6 993 ( 0.01%) 280997 ( 0.01%) 282.98
other 99779 ( 1.21%) 33597366 ( 1.47%) 336.72
frag 12934 ( 0.16%) 16719940 ( 0.73%) 1292.71
tcpdump file: 200408141400.dump.gz (215.20 MB)