Traffic Trace Info
DumpFile: 200409281400.dump
FileSize: 469.02MB
Id: 200409281400
StartTime: Tue Sep 28 14:00:01 2004
EndTime: Tue Sep 28 14:15:00 2004
TotalTime: 899.38 seconds
TotalCapSize: 365.68MB CapLen: 96 bytes
# of packets: 6772034 (3408.01MB)
AvgRate: 31.79Mbps stddev:0.72M
IP flow (unique src/dst pair) Information
# of flows: 517198 (avg. 13.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.4% 7.1% 6.7% 1.3% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 379524
Top 10 bandwidth usage (bytes/total in %):
17.2% 11.3% 10.5% 9.7% 7.3% 6.7% 4.2% 3.4% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200409281400.pktlen.png)
detailed numbers
[ 16- 31]: 40063
[ 32- 63]: 2343411
[ 64- 127]: 1412399
[ 128- 255]: 387348
[ 256- 511]: 371042
[ 512- 1023]: 223944
[ 1024- 2047]: 1993827
Protocol Breakdown
![[protocol breakdown chart]](200409281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6772034 (100.00%) 3573552847 (100.00%) 527.69
ip 6721765 ( 99.26%) 3572023376 ( 99.96%) 531.41
tcp 5399282 ( 79.73%) 3126001680 ( 87.48%) 578.97
http(s) 1732648 ( 25.59%) 2085169557 ( 58.35%) 1203.46
http(c) 1677985 ( 24.78%) 189080250 ( 5.29%) 112.68
squid 2178 ( 0.03%) 287778 ( 0.01%) 132.13
smtp 159991 ( 2.36%) 37742658 ( 1.06%) 235.90
nntp 201 ( 0.00%) 17605 ( 0.00%) 87.59
ftp 23686 ( 0.35%) 7659008 ( 0.21%) 323.36
pop3 8788 ( 0.13%) 3488505 ( 0.10%) 396.96
imap 1311 ( 0.02%) 121574 ( 0.00%) 92.73
telnet 1600 ( 0.02%) 126997 ( 0.00%) 79.37
ssh 55627 ( 0.82%) 5188597 ( 0.15%) 93.27
dns 1587 ( 0.02%) 120797 ( 0.00%) 76.12
bgp 178 ( 0.00%) 57494 ( 0.00%) 323.00
napster 1121 ( 0.02%) 146481 ( 0.00%) 130.67
realaud 330 ( 0.00%) 246325 ( 0.01%) 746.44
rtsp 6917 ( 0.10%) 632328 ( 0.02%) 91.42
icecast 5897 ( 0.09%) 409701 ( 0.01%) 69.48
hotline 59 ( 0.00%) 7583 ( 0.00%) 128.53
other 1718124 ( 25.37%) 795458668 ( 22.26%) 462.98
udp 1061425 ( 15.67%) 421252551 ( 11.79%) 396.87
dns 728631 ( 10.76%) 169757599 ( 4.75%) 232.98
realaud 1021 ( 0.02%) 85620 ( 0.00%) 83.86
halflif 85 ( 0.00%) 21256 ( 0.00%) 250.07
everque 59 ( 0.00%) 3540 ( 0.00%) 60.00
quake 5166 ( 0.08%) 1290819 ( 0.04%) 249.87
other 300174 ( 4.43%) 213319438 ( 5.97%) 710.65
icmp 130473 ( 1.93%) 10357549 ( 0.29%) 79.38
ipsec 665 ( 0.01%) 108070 ( 0.00%) 162.51
ip6 304 ( 0.00%) 70699 ( 0.00%) 232.56
other 129616 ( 1.91%) 14232827 ( 0.40%) 109.81
frag 133582 ( 1.97%) 194066049 ( 5.43%) 1452.79
tcpdump file: 200409281400.dump.gz (186.78 MB)