Traffic Trace Info
DumpFile: 200409041400.dump
FileSize: 704.13MB
Id: 200409041400
StartTime: Sat Sep 4 14:00:00 2004
EndTime: Sat Sep 4 14:15:00 2004
TotalTime: 900.16 seconds
TotalCapSize: 556.91MB CapLen: 96 bytes
# of packets: 9647899 (2268.72MB)
AvgRate: 21.15Mbps stddev:3.68M
IP flow (unique src/dst pair) Information
# of flows: 2756949 (avg. 3.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.8% 2.3% 2.2% 2.1% 1.7% 1.4% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 646734
Top 10 bandwidth usage (bytes/total in %):
23.0% 8.7% 3.8% 3.8% 3.7% 2.9% 2.9% 2.7% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409041400.pktlen.png)
detailed numbers
[ 16- 31]: 39601
[ 32- 63]: 6526064
[ 64- 127]: 1470297
[ 128- 255]: 169638
[ 256- 511]: 171593
[ 512- 1023]: 143026
[ 1024- 2047]: 1127680
Protocol Breakdown
![[protocol breakdown chart]](200409041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9647899 (100.00%) 2378930131 (100.00%) 246.57
ip 9601813 ( 99.52%) 2377539875 ( 99.94%) 247.61
tcp 8799749 ( 91.21%) 2149729587 ( 90.37%) 244.29
http(s) 661256 ( 6.85%) 759208106 ( 31.91%) 1148.13
http(c) 1005704 ( 10.42%) 108991113 ( 4.58%) 108.37
squid 16351 ( 0.17%) 1266091 ( 0.05%) 77.43
smtp 88851 ( 0.92%) 18248286 ( 0.77%) 205.38
nntp 221 ( 0.00%) 26119 ( 0.00%) 118.19
ftp 19912 ( 0.21%) 4929248 ( 0.21%) 247.55
pop3 1627 ( 0.02%) 546144 ( 0.02%) 335.68
imap 655 ( 0.01%) 52885 ( 0.00%) 80.74
telnet 448 ( 0.00%) 46244 ( 0.00%) 103.22
ssh 6599 ( 0.07%) 5398580 ( 0.23%) 818.09
dns 893 ( 0.01%) 59319 ( 0.00%) 66.43
bgp 185 ( 0.00%) 55210 ( 0.00%) 298.43
napster 14696 ( 0.15%) 8435827 ( 0.35%) 574.02
realaud 136 ( 0.00%) 17878 ( 0.00%) 131.46
rtsp 15401 ( 0.16%) 6168307 ( 0.26%) 400.51
icecast 7872 ( 0.08%) 756847 ( 0.03%) 96.14
hotline 8 ( 0.00%) 1007 ( 0.00%) 125.88
other 6957952 ( 72.12%) 1235485806 ( 51.93%) 177.56
udp 509447 ( 5.28%) 208487369 ( 8.76%) 409.24
dns 316308 ( 3.28%) 74910499 ( 3.15%) 236.83
realaud 100437 ( 1.04%) 107978303 ( 4.54%) 1075.08
everque 2 ( 0.00%) 184 ( 0.00%) 92.00
quake 1 ( 0.00%) 77 ( 0.00%) 77.00
other 92566 ( 0.96%) 25593402 ( 1.08%) 276.49
icmp 221529 ( 2.30%) 16699519 ( 0.70%) 75.38
ip6 384 ( 0.00%) 168104 ( 0.01%) 437.77
other 70704 ( 0.73%) 2455296 ( 0.10%) 34.73
frag 8 ( 0.00%) 480 ( 0.00%) 60.00
tcpdump file: 200409041400.dump.gz (252.59 MB)