Traffic Trace Info
DumpFile: 200409181400.dump
FileSize: 710.97MB
Id: 200409181400
StartTime: Sat Sep 18 14:00:00 2004
EndTime: Sat Sep 18 14:15:00 2004
TotalTime: 900.05 seconds
TotalCapSize: 562.20MB CapLen: 96 bytes
# of packets: 9749239 (2215.45MB)
AvgRate: 20.65Mbps stddev:3.22M
IP flow (unique src/dst pair) Information
# of flows: 2697183 (avg. 3.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.5% 2.0% 1.4% 1.3% 1.2% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 636619
Top 10 bandwidth usage (bytes/total in %):
13.4% 7.1% 7.0% 5.5% 4.7% 3.6% 3.6% 3.5% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409181400.pktlen.png)
detailed numbers
[ 16- 31]: 36326
[ 32- 63]: 6692018
[ 64- 127]: 1457728
[ 128- 255]: 160517
[ 256- 511]: 170623
[ 512- 1023]: 150137
[ 1024- 2047]: 1081890
Protocol Breakdown
![[protocol breakdown chart]](200409181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9749239 (100.00%) 2323065776 (100.00%) 238.28
ip 9705869 ( 99.56%) 2321756636 ( 99.94%) 239.21
tcp 8782527 ( 90.08%) 2163129220 ( 93.12%) 246.30
http(s) 584065 ( 5.99%) 628218545 ( 27.04%) 1075.60
http(c) 819536 ( 8.41%) 104321018 ( 4.49%) 127.29
squid 4608 ( 0.05%) 548143 ( 0.02%) 118.95
smtp 274740 ( 2.82%) 49715496 ( 2.14%) 180.95
nntp 41 ( 0.00%) 3296 ( 0.00%) 80.39
ftp 23208 ( 0.24%) 8674587 ( 0.37%) 373.78
pop3 4038 ( 0.04%) 1784394 ( 0.08%) 441.90
imap 1505 ( 0.02%) 113434 ( 0.00%) 75.37
telnet 1012 ( 0.01%) 127415 ( 0.01%) 125.90
ssh 667 ( 0.01%) 84115 ( 0.00%) 126.11
dns 797 ( 0.01%) 60067 ( 0.00%) 75.37
bgp 186 ( 0.00%) 57671 ( 0.00%) 310.06
napster 1165 ( 0.01%) 155457 ( 0.01%) 133.44
realaud 9 ( 0.00%) 705 ( 0.00%) 78.33
rtsp 89869 ( 0.92%) 80401476 ( 3.46%) 894.65
icecast 86 ( 0.00%) 32590 ( 0.00%) 378.95
other 6976151 ( 71.56%) 1288799544 ( 55.48%) 184.74
udp 535400 ( 5.49%) 132444901 ( 5.70%) 247.38
dns 349791 ( 3.59%) 88693534 ( 3.82%) 253.56
realaud 6643 ( 0.07%) 1595221 ( 0.07%) 240.14
everque 1 ( 0.00%) 77 ( 0.00%) 77.00
quake 3 ( 0.00%) 240 ( 0.00%) 80.00
other 178212 ( 1.83%) 41304860 ( 1.78%) 231.77
icmp 319056 ( 3.27%) 23772409 ( 1.02%) 74.51
ip6 293 ( 0.00%) 61781 ( 0.00%) 210.86
other 68593 ( 0.70%) 2348325 ( 0.10%) 34.24
frag 7823 ( 0.08%) 11379677 ( 0.49%) 1454.64
tcpdump file: 200409181400.dump.gz (254.89 MB)