Traffic Trace Info
DumpFile: 200410131400.dump
FileSize: 486.31MB
Id: 200410131400
StartTime: Wed Oct 13 14:00:00 2004
EndTime: Wed Oct 13 14:15:01 2004
TotalTime: 900.78 seconds
TotalCapSize: 380.66MB CapLen: 96 bytes
# of packets: 6924079 (2895.55MB)
AvgRate: 26.96Mbps stddev:0.99M
IP flow (unique src/dst pair) Information
# of flows: 819373 (avg. 8.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.6% 2.0% 1.6% 1.5% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 617905
Top 10 bandwidth usage (bytes/total in %):
17.3% 4.7% 4.7% 3.9% 3.6% 3.2% 2.9% 2.6% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410131400.pktlen.png)
detailed numbers
[ 16- 31]: 34349
[ 32- 63]: 2443318
[ 64- 127]: 1782965
[ 128- 255]: 341533
[ 256- 511]: 312953
[ 512- 1023]: 482456
[ 1024- 2047]: 1526505
Protocol Breakdown
![[protocol breakdown chart]](200410131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6924079 (100.00%) 3036209268 (100.00%) 438.50
ip 6881419 ( 99.38%) 3034913712 ( 99.96%) 441.03
tcp 5709123 ( 82.45%) 2801368661 ( 92.27%) 490.68
http(s) 1343156 ( 19.40%) 1395990970 ( 45.98%) 1039.34
http(c) 1547150 ( 22.34%) 193037963 ( 6.36%) 124.77
squid 6895 ( 0.10%) 1274857 ( 0.04%) 184.90
smtp 158014 ( 2.28%) 28500903 ( 0.94%) 180.37
nntp 233 ( 0.00%) 23939 ( 0.00%) 102.74
ftp 54658 ( 0.79%) 36883678 ( 1.21%) 674.81
pop3 4329 ( 0.06%) 547578 ( 0.02%) 126.49
imap 1656 ( 0.02%) 138860 ( 0.00%) 83.85
telnet 2296 ( 0.03%) 257208 ( 0.01%) 112.02
ssh 6979 ( 0.10%) 1053272 ( 0.03%) 150.92
dns 488 ( 0.01%) 33831 ( 0.00%) 69.33
bgp 194 ( 0.00%) 89455 ( 0.00%) 461.11
napster 19390 ( 0.28%) 5938546 ( 0.20%) 306.27
realaud 4871 ( 0.07%) 1451472 ( 0.05%) 297.98
rtsp 37503 ( 0.54%) 22619910 ( 0.75%) 603.15
icecast 11756 ( 0.17%) 765909 ( 0.03%) 65.15
hotline 79 ( 0.00%) 9629 ( 0.00%) 121.89
other 2508247 ( 36.22%) 1112703112 ( 36.65%) 443.62
udp 771030 ( 11.14%) 200971571 ( 6.62%) 260.65
dns 551644 ( 7.97%) 150488732 ( 4.96%) 272.80
realaud 19458 ( 0.28%) 8925675 ( 0.29%) 458.71
everque 3 ( 0.00%) 558 ( 0.00%) 186.00
quake 1 ( 0.00%) 60 ( 0.00%) 60.00
cuseeme 1 ( 0.00%) 88 ( 0.00%) 88.00
other 197814 ( 2.86%) 41291232 ( 1.36%) 208.74
icmp 310541 ( 4.48%) 29101771 ( 0.96%) 93.71
ipsec 183 ( 0.00%) 18210 ( 0.00%) 99.51
ip6 1075 ( 0.02%) 387456 ( 0.01%) 360.42
other 89467 ( 1.29%) 3066043 ( 0.10%) 34.27
frag 4836 ( 0.07%) 3927006 ( 0.13%) 812.04
tcpdump file: 200410131400.dump.gz (192.61 MB)