Traffic Trace Info
DumpFile: 200408261400.dump
FileSize: 660.76MB
Id: 200408261400
StartTime: Thu Aug 26 14:00:00 2004
EndTime: Thu Aug 26 14:15:00 2004
TotalTime: 900.10 seconds
TotalCapSize: 521.25MB CapLen: 96 bytes
# of packets: 9142743 (2564.37MB)
AvgRate: 23.90Mbps stddev:2.48M
IP flow (unique src/dst pair) Information
# of flows: 1897035 (avg. 4.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.2% 1.4% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 616484
Top 10 bandwidth usage (bytes/total in %):
16.1% 5.8% 3.3% 2.9% 2.9% 2.7% 2.6% 2.5% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200408261400.pktlen.png)
detailed numbers
[ 16- 31]: 42252
[ 32- 63]: 5579110
[ 64- 127]: 1459933
[ 128- 255]: 261314
[ 256- 511]: 316653
[ 512- 1023]: 175308
[ 1024- 2047]: 1308173
Protocol Breakdown
![[protocol breakdown chart]](200408261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9142743 (100.00%) 2688934505 (100.00%) 294.11
ip 9080280 ( 99.32%) 2687041482 ( 99.93%) 295.92
tcp 8177526 ( 89.44%) 2499692531 ( 92.96%) 305.68
http(s) 949580 ( 10.39%) 1010055735 ( 37.56%) 1063.69
http(c) 1139337 ( 12.46%) 144102375 ( 5.36%) 126.48
squid 25817 ( 0.28%) 17257834 ( 0.64%) 668.47
smtp 196611 ( 2.15%) 41902182 ( 1.56%) 213.12
nntp 159 ( 0.00%) 31515 ( 0.00%) 198.21
ftp 17949 ( 0.20%) 7967073 ( 0.30%) 443.87
pop3 4589 ( 0.05%) 1785346 ( 0.07%) 389.05
imap 565 ( 0.01%) 52740 ( 0.00%) 93.35
telnet 1740 ( 0.02%) 183327 ( 0.01%) 105.36
ssh 6742 ( 0.07%) 2676909 ( 0.10%) 397.05
dns 2859 ( 0.03%) 197127 ( 0.01%) 68.95
bgp 182 ( 0.00%) 73755 ( 0.00%) 405.25
napster 906 ( 0.01%) 118178 ( 0.00%) 130.44
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 10849 ( 0.12%) 3192272 ( 0.12%) 294.25
icecast 14173 ( 0.16%) 2922221 ( 0.11%) 206.18
hotline 13 ( 0.00%) 1926 ( 0.00%) 148.15
other 5804812 ( 63.49%) 1267148310 ( 47.12%) 218.29
udp 637068 ( 6.97%) 169742072 ( 6.31%) 266.44
dns 486464 ( 5.32%) 124906848 ( 4.65%) 256.76
realaud 10385 ( 0.11%) 10756968 ( 0.40%) 1035.82
halflif 1 ( 0.00%) 87 ( 0.00%) 87.00
everque 136 ( 0.00%) 22027 ( 0.00%) 161.96
quake 1 ( 0.00%) 87 ( 0.00%) 87.00
other 139786 ( 1.53%) 33908030 ( 1.26%) 242.57
icmp 194990 ( 2.13%) 14905828 ( 0.55%) 76.44
ip6 988 ( 0.01%) 329846 ( 0.01%) 333.85
other 69708 ( 0.76%) 2371205 ( 0.09%) 34.02
frag 1136 ( 0.01%) 1460270 ( 0.05%) 1285.45
tcpdump file: 200408261400.dump.gz (244.94 MB)