Traffic Trace Info
DumpFile: 200409191400.dump
FileSize: 604.42MB
Id: 200409191400
StartTime: Sun Sep 19 14:00:00 2004
EndTime: Sun Sep 19 14:15:00 2004
TotalTime: 899.97 seconds
TotalCapSize: 477.49MB CapLen: 96 bytes
# of packets: 8318512 (1885.18MB)
AvgRate: 17.58Mbps stddev:3.67M
IP flow (unique src/dst pair) Information
# of flows: 2312435 (avg. 3.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.1% 1.8% 1.5% 1.4% 1.4% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 633214
Top 10 bandwidth usage (bytes/total in %):
20.0% 5.6% 4.5% 3.9% 3.5% 3.5% 3.0% 2.5% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409191400.pktlen.png)
detailed numbers
[ 16- 31]: 25570
[ 32- 63]: 5767296
[ 64- 127]: 1118775
[ 128- 255]: 183457
[ 256- 511]: 141144
[ 512- 1023]: 163092
[ 1024- 2047]: 919178
Protocol Breakdown
![[protocol breakdown chart]](200409191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8318512 (100.00%) 1976749921 (100.00%) 237.63
ip 8288237 ( 99.64%) 1975834961 ( 99.95%) 238.39
tcp 7467049 ( 89.76%) 1746694923 ( 88.36%) 233.92
http(s) 367384 ( 4.42%) 388331811 ( 19.64%) 1057.02
http(c) 388348 ( 4.67%) 43065621 ( 2.18%) 110.89
squid 3722 ( 0.04%) 365854 ( 0.02%) 98.30
smtp 201230 ( 2.42%) 43606933 ( 2.21%) 216.70
nntp 4567 ( 0.05%) 5666498 ( 0.29%) 1240.75
ftp 16267 ( 0.20%) 14279342 ( 0.72%) 877.81
pop3 1670 ( 0.02%) 306947 ( 0.02%) 183.80
imap 509 ( 0.01%) 41310 ( 0.00%) 81.16
telnet 1027 ( 0.01%) 118840 ( 0.01%) 115.72
ssh 299 ( 0.00%) 41419 ( 0.00%) 138.53
dns 1403 ( 0.02%) 94685 ( 0.00%) 67.49
bgp 210 ( 0.00%) 94568 ( 0.00%) 450.32
napster 2241 ( 0.03%) 656211 ( 0.03%) 292.82
realaud 60 ( 0.00%) 9272 ( 0.00%) 154.53
rtsp 15183 ( 0.18%) 8642719 ( 0.44%) 569.24
icecast 6888 ( 0.08%) 510002 ( 0.03%) 74.04
other 6455473 ( 77.60%) 1240841701 ( 62.77%) 192.22
udp 516910 ( 6.21%) 208013371 ( 10.52%) 402.42
dns 314875 ( 3.79%) 80928299 ( 4.09%) 257.02
realaud 3725 ( 0.04%) 272481 ( 0.01%) 73.15
everque 126 ( 0.00%) 18450 ( 0.00%) 146.43
quake 1 ( 0.00%) 60 ( 0.00%) 60.00
other 198056 ( 2.38%) 126789396 ( 6.41%) 640.17
icmp 255784 ( 3.07%) 19403343 ( 0.98%) 75.86
ip6 281 ( 0.00%) 58102 ( 0.00%) 206.77
other 48213 ( 0.58%) 1665222 ( 0.08%) 34.54
frag 13 ( 0.00%) 6470 ( 0.00%) 497.69
tcpdump file: 200409191400.dump.gz (214.89 MB)