Traffic Trace Info
DumpFile: 200410181400.dump
FileSize: 410.89MB
Id: 200410181400
StartTime: Mon Oct 18 14:00:00 2004
EndTime: Mon Oct 18 14:15:00 2004
TotalTime: 899.78 seconds
TotalCapSize: 321.98MB CapLen: 96 bytes
# of packets: 5826758 (2826.00MB)
AvgRate: 26.35Mbps stddev:0.95M
IP flow (unique src/dst pair) Information
# of flows: 407464 (avg. 14.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 6.1% 3.1% 2.1% 1.9% 1.6% 1.5% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 288705
Top 10 bandwidth usage (bytes/total in %):
18.3% 17.8% 6.3% 6.3% 4.1% 3.5% 3.1% 3.1% 3.0% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410181400.pktlen.png)
detailed numbers
[ 16- 31]: 25332
[ 32- 63]: 1786202
[ 64- 127]: 1524263
[ 128- 255]: 329197
[ 256- 511]: 295736
[ 512- 1023]: 249911
[ 1024- 2047]: 1616117
Protocol Breakdown
![[protocol breakdown chart]](200410181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5826758 (100.00%) 2963271821 (100.00%) 508.56
ip 5795322 ( 99.46%) 2962316882 ( 99.97%) 511.16
tcp 4744058 ( 81.42%) 2719645825 ( 91.78%) 573.27
http(s) 1037823 ( 17.81%) 1155733671 ( 39.00%) 1113.61
http(c) 1430023 ( 24.54%) 184266720 ( 6.22%) 128.86
squid 27083 ( 0.46%) 12332907 ( 0.42%) 455.37
smtp 129995 ( 2.23%) 34145329 ( 1.15%) 262.67
nntp 246 ( 0.00%) 38278 ( 0.00%) 155.60
ftp 236609 ( 4.06%) 192558528 ( 6.50%) 813.83
pop3 3866 ( 0.07%) 1012109 ( 0.03%) 261.80
imap 1006 ( 0.02%) 77691 ( 0.00%) 77.23
telnet 1395 ( 0.02%) 135363 ( 0.00%) 97.03
ssh 9354 ( 0.16%) 3680832 ( 0.12%) 393.50
dns 889 ( 0.02%) 68521 ( 0.00%) 77.08
bgp 186 ( 0.00%) 74816 ( 0.00%) 402.24
napster 746 ( 0.01%) 97798 ( 0.00%) 131.10
realaud 4243 ( 0.07%) 256121 ( 0.01%) 60.36
rtsp 89381 ( 1.53%) 64355625 ( 2.17%) 720.01
icecast 461 ( 0.01%) 58542 ( 0.00%) 126.99
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1769898 ( 30.38%) 1070721065 ( 36.13%) 604.96
udp 845458 ( 14.51%) 227184979 ( 7.67%) 268.71
dns 583472 ( 10.01%) 156109766 ( 5.27%) 267.55
realaud 10102 ( 0.17%) 1864967 ( 0.06%) 184.61
quake 2 ( 0.00%) 122 ( 0.00%) 61.00
cuseeme 2 ( 0.00%) 149 ( 0.00%) 74.50
other 251712 ( 4.32%) 69203784 ( 2.34%) 274.93
icmp 139395 ( 2.39%) 12926018 ( 0.44%) 92.73
ipsec 185 ( 0.00%) 18446 ( 0.00%) 99.71
ip6 783 ( 0.01%) 293729 ( 0.01%) 375.13
other 65443 ( 1.12%) 2247885 ( 0.08%) 34.35
frag 7 ( 0.00%) 420 ( 0.00%) 60.00
tcpdump file: 200410181400.dump.gz (162.08 MB)