Traffic Trace Info
DumpFile: 200408291400.dump
FileSize: 588.25MB
Id: 200408291400
StartTime: Sun Aug 29 14:00:00 2004
EndTime: Sun Aug 29 14:15:00 2004
TotalTime: 899.88 seconds
TotalCapSize: 464.90MB CapLen: 96 bytes
# of packets: 8083829 (2091.49MB)
AvgRate: 19.50Mbps stddev:3.07M
IP flow (unique src/dst pair) Information
# of flows: 2111073 (avg. 3.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.5% 3.9% 3.3% 2.2% 2.1% 1.5% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 611914
Top 10 bandwidth usage (bytes/total in %):
12.7% 12.6% 5.8% 5.7% 5.6% 5.0% 4.8% 4.7% 4.3% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200408291400.pktlen.png)
detailed numbers
[ 16- 31]: 28190
[ 32- 63]: 5472782
[ 64- 127]: 1068169
[ 128- 255]: 155198
[ 256- 511]: 177771
[ 512- 1023]: 102401
[ 1024- 2047]: 1079318
Protocol Breakdown
![[protocol breakdown chart]](200408291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8083829 (100.00%) 2193081227 (100.00%) 271.29
ip 8051241 ( 99.60%) 2192098813 ( 99.96%) 272.27
tcp 7341432 ( 90.82%) 2042255437 ( 93.12%) 278.18
http(s) 405887 ( 5.02%) 434169233 ( 19.80%) 1069.68
http(c) 513400 ( 6.35%) 59068347 ( 2.69%) 115.05
squid 6569 ( 0.08%) 849209 ( 0.04%) 129.28
smtp 223227 ( 2.76%) 38884568 ( 1.77%) 174.19
nntp 22 ( 0.00%) 1342 ( 0.00%) 61.00
ftp 18074 ( 0.22%) 19155665 ( 0.87%) 1059.85
pop3 2042 ( 0.03%) 681500 ( 0.03%) 333.74
imap 195 ( 0.00%) 21747 ( 0.00%) 111.52
telnet 743 ( 0.01%) 46931 ( 0.00%) 63.16
ssh 1056 ( 0.01%) 92420 ( 0.00%) 87.52
dns 1423 ( 0.02%) 174931 ( 0.01%) 122.93
bgp 176 ( 0.00%) 62564 ( 0.00%) 355.48
napster 11825 ( 0.15%) 3033016 ( 0.14%) 256.49
realaud 10 ( 0.00%) 740 ( 0.00%) 74.00
rtsp 7177 ( 0.09%) 3831286 ( 0.17%) 533.83
icecast 30 ( 0.00%) 2974 ( 0.00%) 99.13
other 6148991 ( 76.07%) 1482157247 ( 67.58%) 241.04
udp 446564 ( 5.52%) 131633282 ( 6.00%) 294.77
dns 320261 ( 3.96%) 76444877 ( 3.49%) 238.70
realaud 907 ( 0.01%) 76671 ( 0.00%) 84.53
halflif 3421 ( 0.04%) 313226 ( 0.01%) 91.56
everque 1 ( 0.00%) 82 ( 0.00%) 82.00
other 121771 ( 1.51%) 54729653 ( 2.50%) 449.45
icmp 216490 ( 2.68%) 16322019 ( 0.74%) 75.39
ip6 1051 ( 0.01%) 321582 ( 0.01%) 305.98
other 45704 ( 0.57%) 1566493 ( 0.07%) 34.27
frag 272 ( 0.00%) 341775 ( 0.02%) 1256.53
tcpdump file: 200408291400.dump.gz (209.20 MB)