Traffic Trace Info
DumpFile: 200409241400.dump
FileSize: 433.77MB
Id: 200409241400
StartTime: Fri Sep 24 14:00:01 2004
EndTime: Fri Sep 24 14:15:01 2004
TotalTime: 899.91 seconds
TotalCapSize: 339.99MB CapLen: 96 bytes
# of packets: 6146211 (3040.17MB)
AvgRate: 28.34Mbps stddev:0.76M
IP flow (unique src/dst pair) Information
# of flows: 638659 (avg. 9.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.9% 3.5% 3.3% 2.8% 1.6% 1.2% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 383529
Top 10 bandwidth usage (bytes/total in %):
17.2% 14.3% 13.3% 8.8% 6.5% 3.7% 3.6% 3.4% 3.2% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409241400.pktlen.png)
detailed numbers
[ 16- 31]: 32151
[ 32- 63]: 2086543
[ 64- 127]: 1597578
[ 128- 255]: 175629
[ 256- 511]: 248983
[ 512- 1023]: 207052
[ 1024- 2047]: 1798275
Protocol Breakdown
![[protocol breakdown chart]](200409241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6146211 (100.00%) 3187851195 (100.00%) 518.67
ip 6106127 ( 99.35%) 3186634197 ( 99.96%) 521.87
tcp 5254287 ( 85.49%) 3016604294 ( 94.63%) 574.12
http(s) 1608192 ( 26.17%) 1987479111 ( 62.35%) 1235.85
http(c) 1757264 ( 28.59%) 184856363 ( 5.80%) 105.20
squid 4525 ( 0.07%) 882199 ( 0.03%) 194.96
smtp 149047 ( 2.43%) 37256331 ( 1.17%) 249.96
nntp 348 ( 0.01%) 36790 ( 0.00%) 105.72
ftp 45779 ( 0.74%) 4986203 ( 0.16%) 108.92
pop3 6386 ( 0.10%) 2079384 ( 0.07%) 325.62
imap 1154 ( 0.02%) 122253 ( 0.00%) 105.94
telnet 2314 ( 0.04%) 242049 ( 0.01%) 104.60
ssh 4271 ( 0.07%) 389874 ( 0.01%) 91.28
dns 1024 ( 0.02%) 72198 ( 0.00%) 70.51
bgp 187 ( 0.00%) 69176 ( 0.00%) 369.93
napster 27748 ( 0.45%) 7556729 ( 0.24%) 272.33
rtsp 20009 ( 0.33%) 16115480 ( 0.51%) 805.41
icecast 32794 ( 0.53%) 17118855 ( 0.54%) 522.01
hotline 4 ( 0.00%) 491 ( 0.00%) 122.75
other 1592236 ( 25.91%) 757303387 ( 23.76%) 475.62
udp 544372 ( 8.86%) 135623178 ( 4.25%) 249.14
dns 425121 ( 6.92%) 105990496 ( 3.32%) 249.32
realaud 4362 ( 0.07%) 1430849 ( 0.04%) 328.03
halflif 6 ( 0.00%) 362 ( 0.00%) 60.33
starcra 9 ( 0.00%) 848 ( 0.00%) 94.22
everque 65 ( 0.00%) 15958 ( 0.00%) 245.51
other 114680 ( 1.87%) 28179884 ( 0.88%) 245.73
icmp 187283 ( 3.05%) 14494513 ( 0.45%) 77.39
ipsec 175 ( 0.00%) 17226 ( 0.00%) 98.43
ip6 284 ( 0.00%) 59511 ( 0.00%) 209.55
other 119726 ( 1.95%) 19835475 ( 0.62%) 165.67
frag 9 ( 0.00%) 1986 ( 0.00%) 220.67
tcpdump file: 200409241400.dump.gz (167.42 MB)