Traffic Trace Info
DumpFile: 200410041400.dump
FileSize: 397.51MB
Id: 200410041400
StartTime: Mon Oct 4 14:00:00 2004
EndTime: Mon Oct 4 14:15:00 2004
TotalTime: 900.27 seconds
TotalCapSize: 311.44MB CapLen: 96 bytes
# of packets: 5640932 (2789.68MB)
AvgRate: 25.99Mbps stddev:1.13M
IP flow (unique src/dst pair) Information
# of flows: 399170 (avg. 14.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 2.4% 2.3% 2.1% 1.9% 1.6% 1.6% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 290740
Top 10 bandwidth usage (bytes/total in %):
9.1% 7.3% 5.2% 4.9% 4.3% 2.9% 2.5% 2.4% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410041400.pktlen.png)
detailed numbers
[ 16- 31]: 24127
[ 32- 63]: 1553363
[ 64- 127]: 1522920
[ 128- 255]: 413580
[ 256- 511]: 259777
[ 512- 1023]: 277287
[ 1024- 2047]: 1589878
Protocol Breakdown
![[protocol breakdown chart]](200410041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5640932 (100.00%) 2925188347 (100.00%) 518.56
ip 5610782 ( 99.47%) 2924272219 ( 99.97%) 521.19
tcp 4528246 ( 80.27%) 2659178832 ( 90.91%) 587.24
http(s) 946220 ( 16.77%) 1063197093 ( 36.35%) 1123.63
http(c) 1290669 ( 22.88%) 174759555 ( 5.97%) 135.40
squid 8483 ( 0.15%) 4292062 ( 0.15%) 505.96
smtp 128062 ( 2.27%) 41901262 ( 1.43%) 327.20
nntp 31 ( 0.00%) 2207 ( 0.00%) 71.19
ftp 25264 ( 0.45%) 18192153 ( 0.62%) 720.08
pop3 8126 ( 0.14%) 5087046 ( 0.17%) 626.02
imap 1537 ( 0.03%) 122003 ( 0.00%) 79.38
telnet 1225 ( 0.02%) 114774 ( 0.00%) 93.69
ssh 3880 ( 0.07%) 547360 ( 0.02%) 141.07
dns 956 ( 0.02%) 84712 ( 0.00%) 88.61
bgp 197 ( 0.00%) 84208 ( 0.00%) 427.45
napster 6522 ( 0.12%) 777082 ( 0.03%) 119.15
rtsp 166755 ( 2.96%) 138500358 ( 4.73%) 830.56
icecast 209 ( 0.00%) 24717 ( 0.00%) 118.26
hotline 50 ( 0.00%) 7001 ( 0.00%) 140.02
other 1939268 ( 34.38%) 1211455173 ( 41.41%) 624.70
udp 853129 ( 15.12%) 244572973 ( 8.36%) 286.68
dns 663810 ( 11.77%) 155794770 ( 5.33%) 234.70
realaud 28131 ( 0.50%) 16658681 ( 0.57%) 592.18
everque 1 ( 0.00%) 78 ( 0.00%) 78.00
cuseeme 2 ( 0.00%) 214 ( 0.00%) 107.00
other 158954 ( 2.82%) 71758718 ( 2.45%) 451.44
icmp 164098 ( 2.91%) 17973389 ( 0.61%) 109.53
ipsec 181 ( 0.00%) 17790 ( 0.00%) 98.29
ip6 901 ( 0.02%) 327233 ( 0.01%) 363.19
other 64227 ( 1.14%) 2202002 ( 0.08%) 34.28
frag 7043 ( 0.12%) 7147819 ( 0.24%) 1014.88
tcpdump file: 200410041400.dump.gz (154.13 MB)