Traffic Trace Info
DumpFile: 200410121400.dump
FileSize: 447.10MB
Id: 200410121400
StartTime: Tue Oct 12 14:00:00 2004
EndTime: Tue Oct 12 14:15:00 2004
TotalTime: 899.69 seconds
TotalCapSize: 349.50MB CapLen: 96 bytes
# of packets: 6396276 (3085.11MB)
AvgRate: 28.77Mbps stddev:0.77M
IP flow (unique src/dst pair) Information
# of flows: 438516 (avg. 14.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
27.2% 1.4% 1.2% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 285791
Top 10 bandwidth usage (bytes/total in %):
28.3% 28.0% 12.1% 4.6% 3.2% 3.2% 2.9% 2.7% 2.5% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410121400.pktlen.png)
detailed numbers
[ 16- 31]: 34792
[ 32- 63]: 2285708
[ 64- 127]: 1501854
[ 128- 255]: 217910
[ 256- 511]: 309589
[ 512- 1023]: 256432
[ 1024- 2047]: 1789991
Protocol Breakdown
![[protocol breakdown chart]](200410121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6396276 (100.00%) 3234967647 (100.00%) 505.76
ip 6353529 ( 99.33%) 3233669964 ( 99.96%) 508.96
tcp 5458204 ( 85.33%) 3041023597 ( 94.00%) 557.15
http(s) 1397471 ( 21.85%) 1699774592 ( 52.54%) 1216.32
http(c) 1953525 ( 30.54%) 201874647 ( 6.24%) 103.34
squid 11493 ( 0.18%) 7083735 ( 0.22%) 616.35
smtp 171676 ( 2.68%) 67759292 ( 2.09%) 394.69
nntp 174 ( 0.00%) 14923 ( 0.00%) 85.76
ftp 30239 ( 0.47%) 15919799 ( 0.49%) 526.47
pop3 9167 ( 0.14%) 3707160 ( 0.11%) 404.40
imap 1260 ( 0.02%) 98096 ( 0.00%) 77.85
telnet 1181 ( 0.02%) 135055 ( 0.00%) 114.36
ssh 6467 ( 0.10%) 618713 ( 0.02%) 95.67
dns 633 ( 0.01%) 44850 ( 0.00%) 70.85
bgp 181 ( 0.00%) 64946 ( 0.00%) 358.82
napster 7887 ( 0.12%) 4020185 ( 0.12%) 509.72
realaud 8 ( 0.00%) 496 ( 0.00%) 62.00
rtsp 129797 ( 2.03%) 115476228 ( 3.57%) 889.67
icecast 12787 ( 0.20%) 898621 ( 0.03%) 70.28
hotline 178 ( 0.00%) 13141 ( 0.00%) 73.83
other 1722963 ( 26.94%) 923477402 ( 28.55%) 535.98
udp 644076 ( 10.07%) 174974072 ( 5.41%) 271.67
dns 485038 ( 7.58%) 134084565 ( 4.14%) 276.44
realaud 13111 ( 0.20%) 7267484 ( 0.22%) 554.30
quake 1 ( 0.00%) 86 ( 0.00%) 86.00
cuseeme 1 ( 0.00%) 60 ( 0.00%) 60.00
other 145732 ( 2.28%) 33558583 ( 1.04%) 230.28
icmp 165053 ( 2.58%) 14672813 ( 0.45%) 88.90
ipsec 181 ( 0.00%) 18022 ( 0.00%) 99.57
ip6 156 ( 0.00%) 39068 ( 0.00%) 250.44
other 85859 ( 1.34%) 2942392 ( 0.09%) 34.27
frag 597 ( 0.01%) 819199 ( 0.03%) 1372.19
tcpdump file: 200410121400.dump.gz (176.80 MB)