Traffic Trace Info
DumpFile: 200408311400.dump
FileSize: 596.30MB
Id: 200408311400
StartTime: Tue Aug 31 14:00:00 2004
EndTime: Tue Aug 31 14:15:00 2004
TotalTime: 900.20 seconds
TotalCapSize: 468.99MB CapLen: 96 bytes
# of packets: 8343149 (2443.88MB)
AvgRate: 22.78Mbps stddev:2.56M
IP flow (unique src/dst pair) Information
# of flows: 1648052 (avg. 5.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 4.5% 2.4% 2.0% 1.8% 1.7% 1.5% 1.5% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 599388
Top 10 bandwidth usage (bytes/total in %):
15.0% 9.1% 9.1% 4.5% 4.5% 3.5% 2.7% 2.6% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200408311400.pktlen.png)
detailed numbers
[ 16- 31]: 38919
[ 32- 63]: 5222964
[ 64- 127]: 1155790
[ 128- 255]: 211589
[ 256- 511]: 269447
[ 512- 1023]: 176879
[ 1024- 2047]: 1267561
Protocol Breakdown
![[protocol breakdown chart]](200408311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8343149 (100.00%) 2562596001 (100.00%) 307.15
ip 8297964 ( 99.46%) 2561233158 ( 99.95%) 308.66
tcp 7265093 ( 87.08%) 2317023100 ( 90.42%) 318.93
http(s) 806699 ( 9.67%) 977555775 ( 38.15%) 1211.80
http(c) 862092 ( 10.33%) 89276781 ( 3.48%) 103.56
squid 5262 ( 0.06%) 826895 ( 0.03%) 157.14
smtp 117149 ( 1.40%) 27498905 ( 1.07%) 234.73
nntp 650 ( 0.01%) 74023 ( 0.00%) 113.88
ftp 12870 ( 0.15%) 933134 ( 0.04%) 72.50
pop3 2761 ( 0.03%) 353263 ( 0.01%) 127.95
imap 2209 ( 0.03%) 186112 ( 0.01%) 84.25
telnet 1597 ( 0.02%) 987015 ( 0.04%) 618.04
ssh 30776 ( 0.37%) 19699470 ( 0.77%) 640.09
dns 3112 ( 0.04%) 250310 ( 0.01%) 80.43
bgp 180 ( 0.00%) 61770 ( 0.00%) 343.17
napster 40504 ( 0.49%) 33393192 ( 1.30%) 824.44
rtsp 16210 ( 0.19%) 10264031 ( 0.40%) 633.19
icecast 11188 ( 0.13%) 6755203 ( 0.26%) 603.79
hotline 2 ( 0.00%) 263 ( 0.00%) 131.50
other 5351024 ( 64.14%) 1148876928 ( 44.83%) 214.70
udp 721186 ( 8.64%) 223354102 ( 8.72%) 309.70
dns 445912 ( 5.34%) 116547015 ( 4.55%) 261.37
realaud 36780 ( 0.44%) 38830481 ( 1.52%) 1055.75
halflif 66233 ( 0.79%) 6876686 ( 0.27%) 103.83
everque 74 ( 0.00%) 7333 ( 0.00%) 99.09
quake 1 ( 0.00%) 79 ( 0.00%) 79.00
other 171999 ( 2.06%) 61085626 ( 2.38%) 355.15
icmp 243210 ( 2.92%) 18083385 ( 0.71%) 74.35
ip6 1473 ( 0.02%) 459467 ( 0.02%) 311.93
other 67002 ( 0.80%) 2313104 ( 0.09%) 34.52
frag 10 ( 0.00%) 2054 ( 0.00%) 205.40
tcpdump file: 200408311400.dump.gz (214.63 MB)