Traffic Trace Info
DumpFile: 200409161400.dump
FileSize: 607.49MB
Id: 200409161400
StartTime: Thu Sep 16 14:00:00 2004
EndTime: Thu Sep 16 14:15:01 2004
TotalTime: 900.44 seconds
TotalCapSize: 478.28MB CapLen: 96 bytes
# of packets: 8467839 (2659.46MB)
AvgRate: 24.77Mbps stddev:1.30M
IP flow (unique src/dst pair) Information
# of flows: 1417807 (avg. 5.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.0% 2.9% 2.1% 1.7% 1.3% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 638516
Top 10 bandwidth usage (bytes/total in %):
9.1% 6.8% 5.4% 5.3% 4.1% 3.6% 3.5% 3.3% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409161400.pktlen.png)
detailed numbers
[ 16- 31]: 41917
[ 32- 63]: 4746542
[ 64- 127]: 1531285
[ 128- 255]: 239487
[ 256- 511]: 257789
[ 512- 1023]: 253645
[ 1024- 2047]: 1397174
Protocol Breakdown
![[protocol breakdown chart]](200409161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8467839 (100.00%) 2788649092 (100.00%) 329.32
ip 8418228 ( 99.41%) 2787150606 ( 99.95%) 331.09
tcp 7442780 ( 87.89%) 2594817291 ( 93.05%) 348.64
http(s) 1087974 ( 12.85%) 1296201888 ( 46.48%) 1191.39
http(c) 1443607 ( 17.05%) 184381469 ( 6.61%) 127.72
squid 7410 ( 0.09%) 1219754 ( 0.04%) 164.61
smtp 265037 ( 3.13%) 59074647 ( 2.12%) 222.89
nntp 89 ( 0.00%) 10462 ( 0.00%) 117.55
ftp 46009 ( 0.54%) 28821842 ( 1.03%) 626.44
pop3 6022 ( 0.07%) 2440684 ( 0.09%) 405.29
imap 1337 ( 0.02%) 106053 ( 0.00%) 79.32
telnet 3321 ( 0.04%) 413782 ( 0.01%) 124.60
ssh 8888 ( 0.10%) 979838 ( 0.04%) 110.24
dns 2168 ( 0.03%) 150234 ( 0.01%) 69.30
bgp 176 ( 0.00%) 52874 ( 0.00%) 300.42
napster 24577 ( 0.29%) 24876982 ( 0.89%) 1012.21
realaud 120 ( 0.00%) 11410 ( 0.00%) 95.08
rtsp 41902 ( 0.49%) 33537632 ( 1.20%) 800.38
icecast 9524 ( 0.11%) 13152340 ( 0.47%) 1380.97
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 4493323 ( 53.06%) 949337206 ( 34.04%) 211.28
udp 680961 ( 8.04%) 172750616 ( 6.19%) 253.69
dns 485174 ( 5.73%) 132072960 ( 4.74%) 272.22
realaud 14899 ( 0.18%) 5672608 ( 0.20%) 380.74
halflif 2 ( 0.00%) 137 ( 0.00%) 68.50
everque 92 ( 0.00%) 10821 ( 0.00%) 117.62
quake 1 ( 0.00%) 72 ( 0.00%) 72.00
other 180182 ( 2.13%) 34418786 ( 1.23%) 191.02
icmp 211991 ( 2.50%) 16704882 ( 0.60%) 78.80
ip6 312 ( 0.00%) 61595 ( 0.00%) 197.42
other 82184 ( 0.97%) 2816222 ( 0.10%) 34.27
frag 2364 ( 0.03%) 3390862 ( 0.12%) 1434.37
tcpdump file: 200409161400.dump.gz (223.30 MB)