Traffic Trace Info
DumpFile: 200409171400.dump
FileSize: 589.33MB
Id: 200409171400
StartTime: Fri Sep 17 14:00:00 2004
EndTime: Fri Sep 17 14:15:01 2004
TotalTime: 900.68 seconds
TotalCapSize: 464.67MB CapLen: 96 bytes
# of packets: 8169333 (2493.08MB)
AvgRate: 23.22Mbps stddev:2.28M
IP flow (unique src/dst pair) Information
# of flows: 1473936 (avg. 5.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.5% 2.1% 1.8% 1.7% 1.1% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 599143
Top 10 bandwidth usage (bytes/total in %):
10.5% 9.0% 6.3% 4.7% 3.7% 3.7% 3.5% 3.0% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409171400.pktlen.png)
detailed numbers
[ 16- 31]: 38035
[ 32- 63]: 4668158
[ 64- 127]: 1470118
[ 128- 255]: 192388
[ 256- 511]: 265515
[ 512- 1023]: 242739
[ 1024- 2047]: 1292380
Protocol Breakdown
![[protocol breakdown chart]](200409171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8169333 (100.00%) 2614178922 (100.00%) 320.00
ip 8124203 ( 99.45%) 2612814461 ( 99.95%) 321.61
tcp 7222515 ( 88.41%) 2436767324 ( 93.21%) 337.38
http(s) 938488 ( 11.49%) 1061844644 ( 40.62%) 1131.44
http(c) 1024952 ( 12.55%) 137019496 ( 5.24%) 133.68
squid 7880 ( 0.10%) 2784866 ( 0.11%) 353.41
smtp 194369 ( 2.38%) 40784296 ( 1.56%) 209.83
nntp 243 ( 0.00%) 27665 ( 0.00%) 113.85
ftp 53449 ( 0.65%) 32418143 ( 1.24%) 606.52
pop3 7547 ( 0.09%) 4901960 ( 0.19%) 649.52
imap 1517 ( 0.02%) 309597 ( 0.01%) 204.09
telnet 2495 ( 0.03%) 1064699 ( 0.04%) 426.73
ssh 11101 ( 0.14%) 1852055 ( 0.07%) 166.84
dns 2819 ( 0.03%) 204678 ( 0.01%) 72.61
bgp 185 ( 0.00%) 69251 ( 0.00%) 374.33
napster 10380 ( 0.13%) 2379828 ( 0.09%) 229.27
realaud 78 ( 0.00%) 11008 ( 0.00%) 141.13
rtsp 26458 ( 0.32%) 9559248 ( 0.37%) 361.30
icecast 6119 ( 0.07%) 372812 ( 0.01%) 60.93
hotline 12 ( 0.00%) 2150 ( 0.00%) 179.17
other 4933368 ( 60.39%) 1141121686 ( 43.65%) 231.31
udp 606223 ( 7.42%) 156076198 ( 5.97%) 257.46
dns 460032 ( 5.63%) 127579106 ( 4.88%) 277.33
realaud 3149 ( 0.04%) 456127 ( 0.02%) 144.85
halflif 1 ( 0.00%) 77 ( 0.00%) 77.00
everque 65 ( 0.00%) 19722 ( 0.00%) 303.42
quake 1 ( 0.00%) 91 ( 0.00%) 91.00
other 142821 ( 1.75%) 28015375 ( 1.07%) 196.16
icmp 218235 ( 2.67%) 17090040 ( 0.65%) 78.31
ipsec 1847 ( 0.02%) 243344 ( 0.01%) 131.75
ip6 314 ( 0.00%) 64482 ( 0.00%) 205.36
other 75069 ( 0.92%) 2573073 ( 0.10%) 34.28
frag 8 ( 0.00%) 480 ( 0.00%) 60.00
tcpdump file: 200409171400.dump.gz (215.46 MB)