Traffic Trace Info
DumpFile: 200409051400.dump
FileSize: 604.95MB
Id: 200409051400
StartTime: Sun Sep 5 14:00:00 2004
EndTime: Sun Sep 5 14:15:00 2004
TotalTime: 899.89 seconds
TotalCapSize: 478.76MB CapLen: 96 bytes
# of packets: 8269697 (1752.15MB)
AvgRate: 16.33Mbps stddev:3.90M
IP flow (unique src/dst pair) Information
# of flows: 2420343 (avg. 3.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.0% 2.0% 1.5% 1.3% 1.3% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 663545
Top 10 bandwidth usage (bytes/total in %):
27.8% 4.8% 3.5% 3.5% 2.6% 2.6% 2.5% 2.4% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409051400.pktlen.png)
detailed numbers
[ 16- 31]: 24170
[ 32- 63]: 5914957
[ 64- 127]: 1094631
[ 128- 255]: 162376
[ 256- 511]: 140254
[ 512- 1023]: 105459
[ 1024- 2047]: 827850
Protocol Breakdown
![[protocol breakdown chart]](200409051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8269697 (100.00%) 1837260539 (100.00%) 222.17
ip 8241537 ( 99.66%) 1836410687 ( 99.95%) 222.82
tcp 7533167 ( 91.09%) 1700145369 ( 92.54%) 225.69
http(s) 440179 ( 5.32%) 486149612 ( 26.46%) 1104.44
http(c) 575646 ( 6.96%) 61489023 ( 3.35%) 106.82
squid 4382 ( 0.05%) 331354 ( 0.02%) 75.62
smtp 86704 ( 1.05%) 13710045 ( 0.75%) 158.12
nntp 5 ( 0.00%) 435 ( 0.00%) 87.00
ftp 12119 ( 0.15%) 2436159 ( 0.13%) 201.02
pop3 1971 ( 0.02%) 306401 ( 0.02%) 155.45
imap 626 ( 0.01%) 51589 ( 0.00%) 82.41
telnet 647 ( 0.01%) 810973 ( 0.04%) 1253.44
ssh 3645 ( 0.04%) 4503990 ( 0.25%) 1235.66
dns 830 ( 0.01%) 63305 ( 0.00%) 76.27
bgp 177 ( 0.00%) 55442 ( 0.00%) 313.23
napster 19588 ( 0.24%) 11462054 ( 0.62%) 585.16
rtsp 13880 ( 0.17%) 5464833 ( 0.30%) 393.72
icecast 4308 ( 0.05%) 769482 ( 0.04%) 178.62
other 6367916 ( 77.00%) 1112520390 ( 60.55%) 174.71
udp 430793 ( 5.21%) 117255914 ( 6.38%) 272.19
dns 263949 ( 3.19%) 65009254 ( 3.54%) 246.29
realaud 24121 ( 0.29%) 14751470 ( 0.80%) 611.56
everque 193 ( 0.00%) 26901 ( 0.00%) 139.38
quake 1 ( 0.00%) 93 ( 0.00%) 93.00
other 141166 ( 1.71%) 35843279 ( 1.95%) 253.91
icmp 235905 ( 2.85%) 17529584 ( 0.95%) 74.31
ip6 287 ( 0.00%) 61270 ( 0.00%) 213.48
other 41385 ( 0.50%) 1418550 ( 0.08%) 34.28
frag 7405 ( 0.09%) 9542029 ( 0.52%) 1288.59
tcpdump file: 200409051400.dump.gz (212.52 MB)