Traffic Trace Info
DumpFile: 200410171400.dump
FileSize: 278.72MB
Id: 200410171400
StartTime: Sun Oct 17 14:00:00 2004
EndTime: Sun Oct 17 14:15:00 2004
TotalTime: 899.85 seconds
TotalCapSize: 218.43MB CapLen: 96 bytes
# of packets: 3951114 (2138.89MB)
AvgRate: 19.94Mbps stddev:1.29M
IP flow (unique src/dst pair) Information
# of flows: 365337 (avg. 10.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.8% 6.7% 2.3% 1.6% 1.4% 1.4% 1.4% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 248200
Top 10 bandwidth usage (bytes/total in %):
29.1% 18.7% 18.3% 8.1% 6.9% 5.5% 2.7% 2.6% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410171400.pktlen.png)
detailed numbers
[ 16- 31]: 13067
[ 32- 63]: 1207961
[ 64- 127]: 1005872
[ 128- 255]: 148711
[ 256- 511]: 147897
[ 512- 1023]: 143986
[ 1024- 2047]: 1283620
Protocol Breakdown
![[protocol breakdown chart]](200410171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3951114 (100.00%) 2242793154 (100.00%) 567.64
ip 3935289 ( 99.60%) 2242313352 ( 99.98%) 569.80
tcp 3270620 ( 82.78%) 2092549787 ( 93.30%) 639.80
http(s) 657842 ( 16.65%) 843701121 ( 37.62%) 1282.53
http(c) 665925 ( 16.85%) 65744969 ( 2.93%) 98.73
squid 1663 ( 0.04%) 132121 ( 0.01%) 79.45
smtp 93674 ( 2.37%) 18128775 ( 0.81%) 193.53
nntp 114 ( 0.00%) 9327 ( 0.00%) 81.82
ftp 10350 ( 0.26%) 1778737 ( 0.08%) 171.86
pop3 690 ( 0.02%) 109676 ( 0.00%) 158.95
imap 174 ( 0.00%) 13414 ( 0.00%) 77.09
telnet 297 ( 0.01%) 34285 ( 0.00%) 115.44
ssh 6584 ( 0.17%) 544098 ( 0.02%) 82.64
dns 716 ( 0.02%) 53150 ( 0.00%) 74.23
bgp 176 ( 0.00%) 61421 ( 0.00%) 348.98
realaud 7 ( 0.00%) 962 ( 0.00%) 137.43
rtsp 9604 ( 0.24%) 3332941 ( 0.15%) 347.04
icecast 2642 ( 0.07%) 310864 ( 0.01%) 117.66
other 1819827 ( 46.06%) 1158581493 ( 51.66%) 636.64
udp 498760 ( 12.62%) 136043516 ( 6.07%) 272.76
dns 299813 ( 7.59%) 80259006 ( 3.58%) 267.70
realaud 10487 ( 0.27%) 2678596 ( 0.12%) 255.42
unreal 1 ( 0.00%) 150 ( 0.00%) 150.00
other 188392 ( 4.77%) 53100207 ( 2.37%) 281.86
icmp 135618 ( 3.43%) 12620134 ( 0.56%) 93.06
ipsec 181 ( 0.00%) 18070 ( 0.00%) 99.83
ip6 286 ( 0.01%) 59593 ( 0.00%) 208.37
other 29824 ( 0.75%) 1022252 ( 0.05%) 34.28
frag 16 ( 0.00%) 12714 ( 0.00%) 794.62
tcpdump file: 200410171400.dump.gz (107.54 MB)