Traffic Trace Info
DumpFile: 200409071400.dump
FileSize: 621.59MB
Id: 200409071400
StartTime: Tue Sep 7 14:00:00 2004
EndTime: Tue Sep 7 14:15:00 2004
TotalTime: 900.20 seconds
TotalCapSize: 489.20MB CapLen: 96 bytes
# of packets: 8676597 (2593.95MB)
AvgRate: 24.17Mbps stddev:2.19M
IP flow (unique src/dst pair) Information
# of flows: 1708058 (avg. 5.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.1% 2.0% 1.9% 1.6% 1.5% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 775383
Top 10 bandwidth usage (bytes/total in %):
15.5% 4.8% 4.1% 3.9% 3.8% 3.1% 3.0% 2.9% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409071400.pktlen.png)
detailed numbers
[ 16- 31]: 44469
[ 32- 63]: 5019387
[ 64- 127]: 1591065
[ 128- 255]: 224666
[ 256- 511]: 225393
[ 512- 1023]: 181375
[ 1024- 2047]: 1390242
Protocol Breakdown
![[protocol breakdown chart]](200409071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8676597 (100.00%) 2719952040 (100.00%) 313.48
ip 8623789 ( 99.39%) 2718354343 ( 99.94%) 315.22
tcp 7529309 ( 86.78%) 2446609332 ( 89.95%) 324.94
http(s) 920187 ( 10.61%) 1008321710 ( 37.07%) 1095.78
http(c) 1182590 ( 13.63%) 165640212 ( 6.09%) 140.07
squid 14331 ( 0.17%) 9181601 ( 0.34%) 640.68
smtp 148605 ( 1.71%) 41602864 ( 1.53%) 279.96
nntp 57 ( 0.00%) 4765 ( 0.00%) 83.60
ftp 16536 ( 0.19%) 8628300 ( 0.32%) 521.79
pop3 2839 ( 0.03%) 287572 ( 0.01%) 101.29
imap 1518 ( 0.02%) 120397 ( 0.00%) 79.31
telnet 1624 ( 0.02%) 937337 ( 0.03%) 577.18
ssh 12564 ( 0.14%) 7069578 ( 0.26%) 562.69
dns 1595 ( 0.02%) 105857 ( 0.00%) 66.37
bgp 184 ( 0.00%) 64355 ( 0.00%) 349.76
napster 1664 ( 0.02%) 164910 ( 0.01%) 99.10
rtsp 10026 ( 0.12%) 4938751 ( 0.18%) 492.59
icecast 29397 ( 0.34%) 23185134 ( 0.85%) 788.69
hotline 4 ( 0.00%) 242 ( 0.00%) 60.50
other 5184388 ( 59.75%) 1176311030 ( 43.25%) 226.89
udp 713667 ( 8.23%) 192254829 ( 7.07%) 269.39
dns 452957 ( 5.22%) 100819005 ( 3.71%) 222.58
realaud 6021 ( 0.07%) 2290359 ( 0.08%) 380.40
halflif 2 ( 0.00%) 224 ( 0.00%) 112.00
everque 25 ( 0.00%) 2391 ( 0.00%) 95.64
other 254410 ( 2.93%) 89132493 ( 3.28%) 350.35
icmp 225480 ( 2.60%) 16846953 ( 0.62%) 74.72
ip6 317 ( 0.00%) 63152 ( 0.00%) 199.22
other 155016 ( 1.79%) 62580077 ( 2.30%) 403.70
frag 18 ( 0.00%) 6959 ( 0.00%) 386.61
tcpdump file: 200409071400.dump.gz (230.22 MB)