Traffic Trace Info
DumpFile: 200408281400.dump
FileSize: 705.40MB
Id: 200408281400
StartTime: Sat Aug 28 14:00:00 2004
EndTime: Sat Aug 28 14:15:00 2004
TotalTime: 900.33 seconds
TotalCapSize: 557.43MB CapLen: 96 bytes
# of packets: 9697114 (2497.01MB)
AvgRate: 23.27Mbps stddev:2.57M
IP flow (unique src/dst pair) Information
# of flows: 2431528 (avg. 3.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 2.9% 2.8% 1.9% 1.1% 1.0% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 643924
Top 10 bandwidth usage (bytes/total in %):
22.0% 10.1% 5.9% 5.6% 3.2% 2.9% 2.9% 2.9% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200408281400.pktlen.png)
detailed numbers
[ 16- 31]: 42474
[ 32- 63]: 6358030
[ 64- 127]: 1515482
[ 128- 255]: 160446
[ 256- 511]: 209042
[ 512- 1023]: 116361
[ 1024- 2047]: 1295279
Protocol Breakdown
![[protocol breakdown chart]](200408281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9697114 (100.00%) 2618305063 (100.00%) 270.01
ip 9647306 ( 99.49%) 2616800611 ( 99.94%) 271.25
tcp 8838725 ( 91.15%) 2488941156 ( 95.06%) 281.60
http(s) 640354 ( 6.60%) 680342300 ( 25.98%) 1062.45
http(c) 882825 ( 9.10%) 107016082 ( 4.09%) 121.22
squid 5491 ( 0.06%) 1910285 ( 0.07%) 347.89
smtp 281706 ( 2.91%) 36189148 ( 1.38%) 128.46
nntp 22 ( 0.00%) 1342 ( 0.00%) 61.00
ftp 57896 ( 0.60%) 11650995 ( 0.44%) 201.24
pop3 6109 ( 0.06%) 1408416 ( 0.05%) 230.55
imap 522 ( 0.01%) 102082 ( 0.00%) 195.56
telnet 681 ( 0.01%) 75193 ( 0.00%) 110.42
ssh 1672 ( 0.02%) 181092 ( 0.01%) 108.31
dns 1305 ( 0.01%) 93610 ( 0.00%) 71.73
bgp 185 ( 0.00%) 62361 ( 0.00%) 337.09
napster 1435 ( 0.01%) 118687 ( 0.00%) 82.71
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 116625 ( 1.20%) 105893334 ( 4.04%) 907.98
icecast 357 ( 0.00%) 387036 ( 0.01%) 1084.13
other 6840523 ( 70.54%) 1543471346 ( 58.95%) 225.64
udp 470708 ( 4.85%) 105457259 ( 4.03%) 224.04
dns 340842 ( 3.51%) 84284769 ( 3.22%) 247.28
realaud 892 ( 0.01%) 74928 ( 0.00%) 84.00
halflif 47916 ( 0.49%) 4460068 ( 0.17%) 93.08
starcra 5 ( 0.00%) 300 ( 0.00%) 60.00
everque 136 ( 0.00%) 19607 ( 0.00%) 144.17
quake 2 ( 0.00%) 162 ( 0.00%) 81.00
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 80316 ( 0.83%) 16101490 ( 0.61%) 200.48
icmp 257375 ( 2.65%) 19141527 ( 0.73%) 74.37
ip6 1708 ( 0.02%) 560020 ( 0.02%) 327.88
other 78790 ( 0.81%) 2700649 ( 0.10%) 34.28
frag 4003 ( 0.04%) 5129864 ( 0.20%) 1281.50
tcpdump file: 200408281400.dump.gz (254.55 MB)