Traffic Trace Info
DumpFile: 200410101400.dump
FileSize: 267.50MB
Id: 200410101400
StartTime: Sun Oct 10 14:00:00 2004
EndTime: Sun Oct 10 14:15:00 2004
TotalTime: 899.64 seconds
TotalCapSize: 209.72MB CapLen: 96 bytes
# of packets: 3786750 (2018.72MB)
AvgRate: 18.82Mbps stddev:1.66M
IP flow (unique src/dst pair) Information
# of flows: 396111 (avg. 9.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.8% 5.0% 3.2% 2.8% 2.3% 2.1% 1.8% 1.5% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 294915
Top 10 bandwidth usage (bytes/total in %):
25.4% 16.5% 16.3% 6.7% 5.1% 5.0% 3.7% 3.5% 3.2% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410101400.pktlen.png)
detailed numbers
[ 16- 31]: 11033
[ 32- 63]: 1241312
[ 64- 127]: 920420
[ 128- 255]: 138539
[ 256- 511]: 141217
[ 512- 1023]: 117243
[ 1024- 2047]: 1216986
Protocol Breakdown
![[protocol breakdown chart]](200410101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3786750 (100.00%) 2116782029 (100.00%) 559.00
ip 3773357 ( 99.65%) 2116376131 ( 99.98%) 560.87
tcp 3146504 ( 83.09%) 1984986646 ( 93.77%) 630.85
http(s) 551393 ( 14.56%) 695370995 ( 32.85%) 1261.12
http(c) 617098 ( 16.30%) 61810072 ( 2.92%) 100.16
squid 3033 ( 0.08%) 187321 ( 0.01%) 61.76
smtp 96488 ( 2.55%) 25357909 ( 1.20%) 262.81
nntp 15 ( 0.00%) 1350 ( 0.00%) 90.00
ftp 2091 ( 0.06%) 452425 ( 0.02%) 216.37
pop3 1318 ( 0.03%) 686718 ( 0.03%) 521.03
imap 330 ( 0.01%) 26039 ( 0.00%) 78.91
telnet 137 ( 0.00%) 10953 ( 0.00%) 79.95
ssh 4972 ( 0.13%) 403205 ( 0.02%) 81.10
dns 1018 ( 0.03%) 76235 ( 0.00%) 74.89
bgp 197 ( 0.01%) 81789 ( 0.00%) 415.17
napster 1907 ( 0.05%) 1044080 ( 0.05%) 547.50
realaud 3654 ( 0.10%) 1655944 ( 0.08%) 453.19
rtsp 15790 ( 0.42%) 11883242 ( 0.56%) 752.58
icecast 24251 ( 0.64%) 22041789 ( 1.04%) 908.90
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 1822525 ( 48.13%) 1163885804 ( 54.98%) 638.61
udp 443258 ( 11.71%) 112813002 ( 5.33%) 254.51
dns 339153 ( 8.96%) 94444841 ( 4.46%) 278.47
realaud 3228 ( 0.09%) 751157 ( 0.04%) 232.70
halflif 10 ( 0.00%) 898 ( 0.00%) 89.80
quake 1 ( 0.00%) 168 ( 0.00%) 168.00
cuseeme 1 ( 0.00%) 86 ( 0.00%) 86.00
other 100794 ( 2.66%) 17613234 ( 0.83%) 174.74
icmp 157601 ( 4.16%) 17552809 ( 0.83%) 111.37
ipsec 179 ( 0.00%) 17602 ( 0.00%) 98.34
ip6 522 ( 0.01%) 139129 ( 0.01%) 266.53
other 25293 ( 0.67%) 866943 ( 0.04%) 34.28
frag 5 ( 0.00%) 300 ( 0.00%) 60.00
tcpdump file: 200410101400.dump.gz (98.24 MB)