Traffic Trace Info
DumpFile: 200409261400.dump
FileSize: 329.77MB
Id: 200409261400
StartTime: Sun Sep 26 14:00:00 2004
EndTime: Sun Sep 26 14:15:00 2004
TotalTime: 900.04 seconds
TotalCapSize: 257.45MB CapLen: 96 bytes
# of packets: 4739295 (2623.62MB)
AvgRate: 24.45Mbps stddev:1.48M
IP flow (unique src/dst pair) Information
# of flows: 388512 (avg. 12.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.8% 6.4% 4.6% 4.6% 4.2% 1.8% 1.6% 1.6% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 255826
Top 10 bandwidth usage (bytes/total in %):
21.7% 16.8% 16.2% 8.2% 7.2% 6.7% 6.6% 4.8% 4.7% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409261400.pktlen.png)
detailed numbers
[ 16- 31]: 19303
[ 32- 63]: 1687408
[ 64- 127]: 1002000
[ 128- 255]: 121664
[ 256- 511]: 151369
[ 512- 1023]: 142496
[ 1024- 2047]: 1615055
Protocol Breakdown
![[protocol breakdown chart]](200409261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4739295 (100.00%) 2751061066 (100.00%) 580.48
ip 4715803 ( 99.50%) 2750348672 ( 99.97%) 583.22
tcp 4096277 ( 86.43%) 2627120906 ( 95.49%) 641.34
http(s) 1102164 ( 23.26%) 1354445544 ( 49.23%) 1228.90
http(c) 974169 ( 20.56%) 89367788 ( 3.25%) 91.74
squid 1842 ( 0.04%) 321113 ( 0.01%) 174.33
smtp 134699 ( 2.84%) 31823694 ( 1.16%) 236.26
ftp 13876 ( 0.29%) 4292839 ( 0.16%) 309.37
pop3 5571 ( 0.12%) 460740 ( 0.02%) 82.70
imap 588 ( 0.01%) 92705 ( 0.00%) 157.66
telnet 252 ( 0.01%) 21532 ( 0.00%) 85.44
ssh 3290 ( 0.07%) 218076 ( 0.01%) 66.28
dns 724 ( 0.02%) 56063 ( 0.00%) 77.44
bgp 170 ( 0.00%) 53865 ( 0.00%) 316.85
napster 16083 ( 0.34%) 9939057 ( 0.36%) 617.99
rtsp 61619 ( 1.30%) 46724624 ( 1.70%) 758.28
icecast 420 ( 0.01%) 36291 ( 0.00%) 86.41
other 1780292 ( 37.56%) 1089247656 ( 39.59%) 611.84
udp 402507 ( 8.49%) 108176764 ( 3.93%) 268.76
dns 276576 ( 5.84%) 67974888 ( 2.47%) 245.77
realaud 12338 ( 0.26%) 10781150 ( 0.39%) 873.82
everque 1 ( 0.00%) 86 ( 0.00%) 86.00
unreal 2342 ( 0.05%) 495542 ( 0.02%) 211.59
quake 4 ( 0.00%) 1311 ( 0.00%) 327.75
other 110199 ( 2.33%) 27502632 ( 1.00%) 249.57
icmp 171271 ( 3.61%) 13423074 ( 0.49%) 78.37
ipsec 180 ( 0.00%) 17744 ( 0.00%) 98.58
ip6 284 ( 0.01%) 57771 ( 0.00%) 203.42
other 45284 ( 0.96%) 1552413 ( 0.06%) 34.28
frag 8660 ( 0.18%) 12777875 ( 0.46%) 1475.51
tcpdump file: 200409261400.dump.gz (123.58 MB)