Traffic Trace Info
DumpFile: 200408171400.dump
FileSize: 698.23MB
Id: 200408171400
StartTime: Tue Aug 17 14:00:00 2004
EndTime: Tue Aug 17 14:15:00 2004
TotalTime: 899.53 seconds
TotalCapSize: 551.77MB CapLen: 96 bytes
# of packets: 9598542 (2577.03MB)
AvgRate: 24.03Mbps stddev:1.55M
IP flow (unique src/dst pair) Information
# of flows: 2120270 (avg. 4.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 4.0% 2.6% 2.6% 2.3% 1.6% 1.6% 1.5% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 651562
Top 10 bandwidth usage (bytes/total in %):
7.1% 7.1% 6.6% 5.6% 4.3% 4.2% 2.8% 2.8% 2.7% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200408171400.pktlen.png)
detailed numbers
[ 16- 31]: 42799
[ 32- 63]: 5845775
[ 64- 127]: 1716566
[ 128- 255]: 185511
[ 256- 511]: 307018
[ 512- 1023]: 215834
[ 1024- 2047]: 1285039
Protocol Breakdown
![[protocol breakdown chart]](200408171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9598542 (100.00%) 2702210974 (100.00%) 281.52
ip 9538998 ( 99.38%) 2700417651 ( 99.93%) 283.09
tcp 8529960 ( 88.87%) 2486885638 ( 92.03%) 291.55
http(s) 1181028 ( 12.30%) 1335291605 ( 49.41%) 1130.62
http(c) 1320130 ( 13.75%) 146540140 ( 5.42%) 111.00
squid 8339 ( 0.09%) 2812208 ( 0.10%) 337.24
smtp 164920 ( 1.72%) 44441375 ( 1.64%) 269.47
nntp 210805 ( 2.20%) 191226241 ( 7.08%) 907.12
ftp 54840 ( 0.57%) 46522821 ( 1.72%) 848.34
pop3 4312 ( 0.04%) 649970 ( 0.02%) 150.74
imap 981 ( 0.01%) 117376 ( 0.00%) 119.65
telnet 2254 ( 0.02%) 1202600 ( 0.04%) 533.54
ssh 5368 ( 0.06%) 985966 ( 0.04%) 183.67
dns 1661 ( 0.02%) 108658 ( 0.00%) 65.42
bgp 182 ( 0.00%) 63210 ( 0.00%) 347.31
napster 2217 ( 0.02%) 237438 ( 0.01%) 107.10
realaud 2798 ( 0.03%) 167904 ( 0.01%) 60.01
rtsp 20554 ( 0.21%) 6212171 ( 0.23%) 302.24
icecast 31781 ( 0.33%) 30040026 ( 1.11%) 945.22
other 5517087 ( 57.48%) 680239482 ( 25.17%) 123.30
udp 663483 ( 6.91%) 190001418 ( 7.03%) 286.37
dns 470201 ( 4.90%) 108567032 ( 4.02%) 230.89
realaud 19 ( 0.00%) 1356 ( 0.00%) 71.37
everque 1 ( 0.00%) 61 ( 0.00%) 61.00
other 193031 ( 2.01%) 81350116 ( 3.01%) 421.44
icmp 285651 ( 2.98%) 21038230 ( 0.78%) 73.65
ip6 1601 ( 0.02%) 504323 ( 0.02%) 315.00
other 58303 ( 0.61%) 1988042 ( 0.07%) 34.10
frag 1032 ( 0.01%) 1214268 ( 0.04%) 1176.62
tcpdump file: 200408171400.dump.gz (251.46 MB)