Traffic Trace Info
DumpFile: 200410111400.dump
FileSize: 299.48MB
Id: 200410111400
StartTime: Mon Oct 11 14:00:01 2004
EndTime: Mon Oct 11 14:15:00 2004
TotalTime: 899.30 seconds
TotalCapSize: 234.48MB CapLen: 96 bytes
# of packets: 4260022 (2058.10MB)
AvgRate: 19.20Mbps stddev:1.71M
IP flow (unique src/dst pair) Information
# of flows: 364189 (avg. 11.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 6.6% 3.4% 2.3% 2.3% 2.0% 2.0% 1.7% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 264808
Top 10 bandwidth usage (bytes/total in %):
15.4% 8.1% 8.1% 7.7% 6.8% 6.8% 6.0% 5.9% 5.0% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410111400.pktlen.png)
detailed numbers
[ 16- 31]: 14339
[ 32- 63]: 1347565
[ 64- 127]: 1156941
[ 128- 255]: 198016
[ 256- 511]: 190138
[ 512- 1023]: 155356
[ 1024- 2047]: 1197667
Protocol Breakdown
![[protocol breakdown chart]](200410111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4260022 (100.00%) 2158074620 (100.00%) 506.59
ip 4242497 ( 99.59%) 2157542953 ( 99.98%) 508.55
tcp 3502298 ( 82.21%) 2009094023 ( 93.10%) 573.65
http(s) 700358 ( 16.44%) 809018820 ( 37.49%) 1155.15
http(c) 1126892 ( 26.45%) 126404729 ( 5.86%) 112.17
squid 2829 ( 0.07%) 585206 ( 0.03%) 206.86
smtp 134689 ( 3.16%) 48664309 ( 2.25%) 361.31
nntp 159 ( 0.00%) 13967 ( 0.00%) 87.84
ftp 13156 ( 0.31%) 4905805 ( 0.23%) 372.89
pop3 4977 ( 0.12%) 939102 ( 0.04%) 188.69
imap 1440 ( 0.03%) 935428 ( 0.04%) 649.60
telnet 1523 ( 0.04%) 140454 ( 0.01%) 92.22
ssh 5718 ( 0.13%) 693112 ( 0.03%) 121.22
dns 685 ( 0.02%) 49786 ( 0.00%) 72.68
bgp 171 ( 0.00%) 56417 ( 0.00%) 329.92
napster 2103 ( 0.05%) 283933 ( 0.01%) 135.01
realaud 2302 ( 0.05%) 138198 ( 0.01%) 60.03
rtsp 80173 ( 1.88%) 72329982 ( 3.35%) 902.17
icecast 8816 ( 0.21%) 694856 ( 0.03%) 78.82
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1415885 ( 33.24%) 943224203 ( 43.71%) 666.17
udp 571770 ( 13.42%) 134586107 ( 6.24%) 235.39
dns 378383 ( 8.88%) 98812275 ( 4.58%) 261.14
realaud 8822 ( 0.21%) 4139995 ( 0.19%) 469.28
halflif 4 ( 0.00%) 328 ( 0.00%) 82.00
everque 5 ( 0.00%) 883 ( 0.00%) 176.60
quake 1 ( 0.00%) 84 ( 0.00%) 84.00
other 184483 ( 4.33%) 31627199 ( 1.47%) 171.44
icmp 135098 ( 3.17%) 12658098 ( 0.59%) 93.70
ipsec 182 ( 0.00%) 18116 ( 0.00%) 99.54
ip6 286 ( 0.01%) 59593 ( 0.00%) 208.37
other 32863 ( 0.77%) 1127016 ( 0.05%) 34.29
frag 15 ( 0.00%) 12642 ( 0.00%) 842.80
tcpdump file: 200410111400.dump.gz (115.97 MB)