Traffic Trace Info
DumpFile: 200410201400.dump
FileSize: 388.84MB
Id: 200410201400
StartTime: Wed Oct 20 14:00:00 2004
EndTime: Wed Oct 20 14:15:00 2004
TotalTime: 899.79 seconds
TotalCapSize: 303.35MB CapLen: 96 bytes
# of packets: 5602200 (2856.01MB)
AvgRate: 26.63Mbps stddev:0.69M
IP flow (unique src/dst pair) Information
# of flows: 388361 (avg. 14.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
24.3% 1.6% 1.2% 1.2% 1.1% 1.1% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 294115
Top 10 bandwidth usage (bytes/total in %):
24.9% 24.9% 16.0% 4.9% 3.9% 2.7% 2.0% 1.9% 1.6% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410201400.pktlen.png)
detailed numbers
[ 16- 31]: 24670
[ 32- 63]: 1887241
[ 64- 127]: 1230280
[ 128- 255]: 281920
[ 256- 511]: 317381
[ 512- 1023]: 205853
[ 1024- 2047]: 1654855
Protocol Breakdown
![[protocol breakdown chart]](200410201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5602200 (100.00%) 2994746175 (100.00%) 534.57
ip 5572386 ( 99.47%) 2993842997 ( 99.97%) 537.26
tcp 4591940 ( 81.97%) 2772393629 ( 92.58%) 603.75
http(s) 1346460 ( 24.03%) 1687862254 ( 56.36%) 1253.56
http(c) 1478994 ( 26.40%) 155393224 ( 5.19%) 105.07
squid 3715 ( 0.07%) 2067702 ( 0.07%) 556.58
smtp 99983 ( 1.78%) 25983451 ( 0.87%) 259.88
nntp 221 ( 0.00%) 21793 ( 0.00%) 98.61
ftp 8394 ( 0.15%) 4458107 ( 0.15%) 531.11
pop3 3019 ( 0.05%) 1007015 ( 0.03%) 333.56
imap 1130 ( 0.02%) 86281 ( 0.00%) 76.35
telnet 713 ( 0.01%) 64334 ( 0.00%) 90.23
ssh 9687 ( 0.17%) 1084208 ( 0.04%) 111.92
dns 898 ( 0.02%) 64369 ( 0.00%) 71.68
bgp 190 ( 0.00%) 80387 ( 0.00%) 423.09
napster 42910 ( 0.77%) 17369246 ( 0.58%) 404.78
realaud 2041 ( 0.04%) 124799 ( 0.00%) 61.15
rtsp 29825 ( 0.53%) 25737269 ( 0.86%) 862.94
icecast 2764 ( 0.05%) 1507756 ( 0.05%) 545.50
other 1560276 ( 27.85%) 849454654 ( 28.36%) 544.43
udp 803145 ( 14.34%) 209638644 ( 7.00%) 261.02
dns 609568 ( 10.88%) 172204861 ( 5.75%) 282.50
realaud 6355 ( 0.11%) 2609772 ( 0.09%) 410.66
starcra 341 ( 0.01%) 36970 ( 0.00%) 108.42
everque 6 ( 0.00%) 948 ( 0.00%) 158.00
quake 1 ( 0.00%) 60 ( 0.00%) 60.00
cuseeme 1 ( 0.00%) 96 ( 0.00%) 96.00
other 186703 ( 3.33%) 34779670 ( 1.16%) 186.28
icmp 120293 ( 2.15%) 9798322 ( 0.33%) 81.45
ipsec 181 ( 0.00%) 18022 ( 0.00%) 99.57
ip6 254 ( 0.00%) 53948 ( 0.00%) 212.39
other 56573 ( 1.01%) 1940432 ( 0.06%) 34.30
frag 9 ( 0.00%) 2020 ( 0.00%) 224.44
tcpdump file: 200410201400.dump.gz (149.45 MB)