Traffic Trace Info
DumpFile: 200409091400.dump
FileSize: 642.98MB
Id: 200409091400
StartTime: Thu Sep 9 14:00:01 2004
EndTime: Thu Sep 9 14:15:00 2004
TotalTime: 899.36 seconds
TotalCapSize: 506.12MB CapLen: 96 bytes
# of packets: 8969292 (2755.27MB)
AvgRate: 25.70Mbps stddev:1.20M
IP flow (unique src/dst pair) Information
# of flows: 1353506 (avg. 6.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 2.1% 1.8% 1.4% 1.4% 1.3% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 628266
Top 10 bandwidth usage (bytes/total in %):
12.6% 9.6% 9.2% 4.2% 3.9% 2.5% 2.4% 2.4% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409091400.pktlen.png)
detailed numbers
[ 16- 31]: 48160
[ 32- 63]: 5217162
[ 64- 127]: 1622825
[ 128- 255]: 200719
[ 256- 511]: 226248
[ 512- 1023]: 184094
[ 1024- 2047]: 1470084
Protocol Breakdown
![[protocol breakdown chart]](200409091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8969292 (100.00%) 2889111247 (100.00%) 322.11
ip 8912202 ( 99.36%) 2887385515 ( 99.94%) 323.98
tcp 8072945 ( 90.01%) 2747920851 ( 95.11%) 340.39
http(s) 1258700 ( 14.03%) 1464000800 ( 50.67%) 1163.11
http(c) 1578432 ( 17.60%) 182431146 ( 6.31%) 115.58
squid 23688 ( 0.26%) 9882855 ( 0.34%) 417.21
smtp 161622 ( 1.80%) 40955944 ( 1.42%) 253.41
nntp 528 ( 0.01%) 91043 ( 0.00%) 172.43
ftp 20233 ( 0.23%) 10612027 ( 0.37%) 524.49
pop3 4742 ( 0.05%) 1257018 ( 0.04%) 265.08
imap 1435 ( 0.02%) 120232 ( 0.00%) 83.79
telnet 4167 ( 0.05%) 1170143 ( 0.04%) 280.81
ssh 16921 ( 0.19%) 15903568 ( 0.55%) 939.87
dns 1009 ( 0.01%) 66401 ( 0.00%) 65.81
bgp 205 ( 0.00%) 77345 ( 0.00%) 377.29
napster 8623 ( 0.10%) 4242464 ( 0.15%) 491.99
realaud 16 ( 0.00%) 960 ( 0.00%) 60.00
rtsp 12713 ( 0.14%) 4760321 ( 0.16%) 374.45
icecast 3984 ( 0.04%) 543299 ( 0.02%) 136.37
other 4974432 ( 55.46%) 1011749557 ( 35.02%) 203.39
udp 553380 ( 6.17%) 121608492 ( 4.21%) 219.76
dns 393913 ( 4.39%) 93615552 ( 3.24%) 237.66
realaud 7266 ( 0.08%) 5175839 ( 0.18%) 712.34
halflif 4 ( 0.00%) 240 ( 0.00%) 60.00
everque 161 ( 0.00%) 38077 ( 0.00%) 236.50
unreal 9 ( 0.00%) 572 ( 0.00%) 63.56
other 151856 ( 1.69%) 22771878 ( 0.79%) 149.96
icmp 191060 ( 2.13%) 14552639 ( 0.50%) 76.17
ip6 309 ( 0.00%) 62933 ( 0.00%) 203.67
other 94508 ( 1.05%) 3240600 ( 0.11%) 34.29
frag 15 ( 0.00%) 900 ( 0.00%) 60.00
tcpdump file: 200409091400.dump.gz (236.52 MB)