Traffic Trace Info
DumpFile: 200409101400.dump
FileSize: 589.11MB
Id: 200409101400
StartTime: Fri Sep 10 14:00:00 2004
EndTime: Fri Sep 10 14:15:00 2004
TotalTime: 899.63 seconds
TotalCapSize: 459.39MB CapLen: 96 bytes
# of packets: 8501459 (2412.24MB)
AvgRate: 22.49Mbps stddev:3.92M
IP flow (unique src/dst pair) Information
# of flows: 1448125 (avg. 5.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.6% 2.9% 2.2% 2.0% 1.9% 1.6% 1.4% 1.4% 1.3% 0.8%
IP address Information
# of IPv4 addresses: 577683
Top 10 bandwidth usage (bytes/total in %):
18.7% 18.6% 11.1% 3.8% 3.6% 3.0% 2.8% 2.7% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409101400.pktlen.png)
detailed numbers
[ 16- 31]: 38282
[ 32- 63]: 4621527
[ 64- 127]: 1071038
[ 128- 255]: 169250
[ 256- 511]: 1465010
[ 512- 1023]: 140806
[ 1024- 2047]: 995546
Protocol Breakdown
![[protocol breakdown chart]](200409101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8501459 (100.00%) 2529413036 (100.00%) 297.53
ip 8456383 ( 99.47%) 2528051608 ( 99.95%) 298.95
tcp 6346150 ( 74.65%) 1868381068 ( 73.87%) 294.41
http(s) 701490 ( 8.25%) 814581629 ( 32.20%) 1161.22
http(c) 754755 ( 8.88%) 92150202 ( 3.64%) 122.09
squid 32559 ( 0.38%) 33006685 ( 1.30%) 1013.75
smtp 92491 ( 1.09%) 15831650 ( 0.63%) 171.17
nntp 126 ( 0.00%) 13806 ( 0.00%) 109.57
ftp 59653 ( 0.70%) 5531846 ( 0.22%) 92.73
pop3 5269 ( 0.06%) 2055821 ( 0.08%) 390.17
imap 1647 ( 0.02%) 132194 ( 0.01%) 80.26
telnet 916 ( 0.01%) 208662 ( 0.01%) 227.80
ssh 6986 ( 0.08%) 652025 ( 0.03%) 93.33
dns 1237 ( 0.01%) 87921 ( 0.00%) 71.08
bgp 186 ( 0.00%) 67726 ( 0.00%) 364.12
napster 54164 ( 0.64%) 25565863 ( 1.01%) 472.01
realaud 19 ( 0.00%) 2060 ( 0.00%) 108.42
rtsp 30878 ( 0.36%) 14113138 ( 0.56%) 457.06
icecast 9696 ( 0.11%) 4277181 ( 0.17%) 441.13
other 4593430 ( 54.03%) 860078337 ( 34.00%) 187.24
udp 1764644 ( 20.76%) 635696106 ( 25.13%) 360.24
dns 358725 ( 4.22%) 93353992 ( 3.69%) 260.24
realaud 6723 ( 0.08%) 2175299 ( 0.09%) 323.56
halflif 9 ( 0.00%) 1140 ( 0.00%) 126.67
everque 4 ( 0.00%) 291 ( 0.00%) 72.75
other 1398635 ( 16.45%) 540145208 ( 21.35%) 386.19
icmp 232083 ( 2.73%) 17245248 ( 0.68%) 74.31
ipsec 41272 ( 0.49%) 4209414 ( 0.17%) 101.99
ip6 251 ( 0.00%) 52611 ( 0.00%) 209.61
other 71983 ( 0.85%) 2467161 ( 0.10%) 34.27
frag 19 ( 0.00%) 1140 ( 0.00%) 60.00
tcpdump file: 200409101400.dump.gz (195.08 MB)