Traffic Trace Info
DumpFile: 200410071400.dump
FileSize: 445.94MB
Id: 200410071400
StartTime: Thu Oct 7 14:00:01 2004
EndTime: Thu Oct 7 14:15:00 2004
TotalTime: 899.14 seconds
TotalCapSize: 348.65MB CapLen: 96 bytes
# of packets: 6376452 (2798.79MB)
AvgRate: 26.11Mbps stddev:1.07M
IP flow (unique src/dst pair) Information
# of flows: 877793 (avg. 7.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.0% 5.3% 2.8% 2.6% 1.4% 1.4% 1.3% 1.2% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 692282
Top 10 bandwidth usage (bytes/total in %):
16.8% 11.6% 11.4% 6.9% 5.5% 5.1% 3.8% 3.4% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410071400.pktlen.png)
detailed numbers
[ 16- 31]: 31362
[ 32- 63]: 2801557
[ 64- 127]: 1264605
[ 128- 255]: 231465
[ 256- 511]: 218817
[ 512- 1023]: 215792
[ 1024- 2047]: 1612854
Protocol Breakdown
![[protocol breakdown chart]](200410071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6376452 (100.00%) 2934741265 (100.00%) 460.25
ip 6338043 ( 99.40%) 2933575537 ( 99.96%) 462.85
tcp 5480731 ( 85.95%) 2753931626 ( 93.84%) 502.48
http(s) 1188775 ( 18.64%) 1407080337 ( 47.95%) 1183.64
http(c) 1477444 ( 23.17%) 168689860 ( 5.75%) 114.18
squid 7972 ( 0.13%) 3442261 ( 0.12%) 431.79
smtp 186194 ( 2.92%) 56698476 ( 1.93%) 304.51
nntp 81 ( 0.00%) 6412 ( 0.00%) 79.16
ftp 14024 ( 0.22%) 3541784 ( 0.12%) 252.55
pop3 15521 ( 0.24%) 8522802 ( 0.29%) 549.11
imap 1735 ( 0.03%) 149017 ( 0.01%) 85.89
telnet 1760 ( 0.03%) 169362 ( 0.01%) 96.23
ssh 10145 ( 0.16%) 6066818 ( 0.21%) 598.01
dns 568 ( 0.01%) 40908 ( 0.00%) 72.02
bgp 187 ( 0.00%) 65827 ( 0.00%) 352.02
napster 9329 ( 0.15%) 4450281 ( 0.15%) 477.04
realaud 4460 ( 0.07%) 326113 ( 0.01%) 73.12
rtsp 62924 ( 0.99%) 34698168 ( 1.18%) 551.43
icecast 13020 ( 0.20%) 796160 ( 0.03%) 61.15
hotline 7 ( 0.00%) 851 ( 0.00%) 121.57
other 2485524 ( 38.98%) 1059145832 ( 36.09%) 426.13
udp 616428 ( 9.67%) 158488741 ( 5.40%) 257.11
dns 428602 ( 6.72%) 102872647 ( 3.51%) 240.02
realaud 15558 ( 0.24%) 6906425 ( 0.24%) 443.91
halflif 27 ( 0.00%) 1620 ( 0.00%) 60.00
everque 2 ( 0.00%) 159 ( 0.00%) 79.50
quake 2288 ( 0.04%) 139616 ( 0.00%) 61.02
other 169803 ( 2.66%) 48562789 ( 1.65%) 285.99
icmp 160307 ( 2.51%) 17760199 ( 0.61%) 110.79
ipsec 181 ( 0.00%) 17742 ( 0.00%) 98.02
ip6 1334 ( 0.02%) 477099 ( 0.02%) 357.65
other 79062 ( 1.24%) 2900130 ( 0.10%) 36.68
frag 172 ( 0.00%) 132538 ( 0.00%) 770.57
tcpdump file: 200410071400.dump.gz (175.78 MB)