Traffic Trace Info
DumpFile: 200410161400.dump
FileSize: 328.35MB
Id: 200410161400
StartTime: Sat Oct 16 14:00:01 2004
EndTime: Sat Oct 16 14:15:00 2004
TotalTime: 899.05 seconds
TotalCapSize: 257.56MB CapLen: 96 bytes
# of packets: 4639487 (2434.60MB)
AvgRate: 22.71Mbps stddev:3.09M
IP flow (unique src/dst pair) Information
# of flows: 407717 (avg. 11.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.7% 6.8% 5.2% 3.9% 3.2% 1.3% 1.1% 1.1% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 281462
Top 10 bandwidth usage (bytes/total in %):
23.5% 14.2% 14.1% 9.1% 8.7% 7.0% 5.4% 5.3% 4.1% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410161400.pktlen.png)
detailed numbers
[ 16- 31]: 18282
[ 32- 63]: 1384335
[ 64- 127]: 1190457
[ 128- 255]: 189954
[ 256- 511]: 246986
[ 512- 1023]: 171782
[ 1024- 2047]: 1437691
Protocol Breakdown
![[protocol breakdown chart]](200410161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4639487 (100.00%) 2552862928 (100.00%) 550.25
ip 4617144 ( 99.52%) 2552185133 ( 99.97%) 552.76
tcp 3830134 ( 82.56%) 2367254589 ( 92.73%) 618.06
http(s) 878795 ( 18.94%) 1081850549 ( 42.38%) 1231.06
http(c) 935514 ( 20.16%) 102582988 ( 4.02%) 109.65
squid 5083 ( 0.11%) 403166 ( 0.02%) 79.32
smtp 127298 ( 2.74%) 32490576 ( 1.27%) 255.23
nntp 309 ( 0.01%) 103385 ( 0.00%) 334.58
ftp 15411 ( 0.33%) 1752461 ( 0.07%) 113.71
pop3 2876 ( 0.06%) 2878854 ( 0.11%) 1000.99
imap 514 ( 0.01%) 40518 ( 0.00%) 78.83
telnet 1333 ( 0.03%) 144872 ( 0.01%) 108.68
ssh 3159 ( 0.07%) 265089 ( 0.01%) 83.92
dns 927 ( 0.02%) 74712 ( 0.00%) 80.60
bgp 179 ( 0.00%) 62262 ( 0.00%) 347.83
napster 16134 ( 0.35%) 4190126 ( 0.16%) 259.71
realaud 2 ( 0.00%) 124 ( 0.00%) 62.00
rtsp 8503 ( 0.18%) 8140628 ( 0.32%) 957.38
icecast 25235 ( 0.54%) 17740012 ( 0.69%) 702.99
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 1808301 ( 38.98%) 1114513242 ( 43.66%) 616.33
udp 576283 ( 12.42%) 167219316 ( 6.55%) 290.17
dns 443249 ( 9.55%) 121639585 ( 4.76%) 274.43
rip 1 ( 0.00%) 62 ( 0.00%) 62.00
realaud 4796 ( 0.10%) 1361477 ( 0.05%) 283.88
everque 63 ( 0.00%) 8961 ( 0.00%) 142.24
quake 16570 ( 0.36%) 5682294 ( 0.22%) 342.93
other 110653 ( 2.39%) 37392808 ( 1.46%) 337.93
icmp 167184 ( 3.60%) 16159079 ( 0.63%) 96.65
ipsec 181 ( 0.00%) 18022 ( 0.00%) 99.57
ip6 279 ( 0.01%) 57190 ( 0.00%) 204.98
other 43083 ( 0.93%) 1476937 ( 0.06%) 34.28
frag 4036 ( 0.09%) 4581989 ( 0.18%) 1135.28
tcpdump file: 200410161400.dump.gz (126.33 MB)