Traffic Trace Info
DumpFile: 200410241400.dump
FileSize: 227.61MB
Id: 200410241400
StartTime: Sun Oct 24 14:00:00 2004
EndTime: Sun Oct 24 14:15:00 2004
TotalTime: 899.89 seconds
TotalCapSize: 177.98MB CapLen: 96 bytes
# of packets: 3252585 (1756.73MB)
AvgRate: 16.38Mbps stddev:1.99M
IP flow (unique src/dst pair) Information
# of flows: 301026 (avg. 10.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.5% 4.3% 2.6% 2.1% 2.1% 2.0% 1.8% 1.7% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 228908
Top 10 bandwidth usage (bytes/total in %):
25.2% 15.9% 15.9% 8.0% 6.1% 3.5% 2.9% 2.9% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410241400.pktlen.png)
detailed numbers
[ 16- 31]: 9130
[ 32- 63]: 1023710
[ 64- 127]: 760920
[ 128- 255]: 151603
[ 256- 511]: 139534
[ 512- 1023]: 122255
[ 1024- 2047]: 1045433
Protocol Breakdown
![[protocol breakdown chart]](200410241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3252585 (100.00%) 1842067388 (100.00%) 566.34
ip 3232145 ( 99.37%) 1841437113 ( 99.97%) 569.73
tcp 2635974 ( 81.04%) 1707798851 ( 92.71%) 647.88
http(s) 633371 ( 19.47%) 828588886 ( 44.98%) 1308.22
http(c) 627166 ( 19.28%) 59248212 ( 3.22%) 94.47
squid 2843 ( 0.09%) 209813 ( 0.01%) 73.80
smtp 101630 ( 3.12%) 14093087 ( 0.77%) 138.67
nntp 86 ( 0.00%) 5861 ( 0.00%) 68.15
ftp 75806 ( 2.33%) 38969290 ( 2.12%) 514.07
pop3 1007 ( 0.03%) 173506 ( 0.01%) 172.30
imap 733 ( 0.02%) 57126 ( 0.00%) 77.93
telnet 122 ( 0.00%) 9331 ( 0.00%) 76.48
ssh 83 ( 0.00%) 5140 ( 0.00%) 61.93
dns 413 ( 0.01%) 27881 ( 0.00%) 67.51
bgp 180 ( 0.01%) 69662 ( 0.00%) 387.01
napster 1292 ( 0.04%) 149361 ( 0.01%) 115.60
rtsp 12454 ( 0.38%) 5766950 ( 0.31%) 463.06
icecast 98 ( 0.00%) 18043 ( 0.00%) 184.11
hotline 9 ( 0.00%) 582 ( 0.00%) 64.67
other 1172861 ( 36.06%) 760207670 ( 41.27%) 648.17
udp 462360 ( 14.22%) 122652800 ( 6.66%) 265.28
dns 308623 ( 9.49%) 85139979 ( 4.62%) 275.87
realaud 912 ( 0.03%) 76512 ( 0.00%) 83.89
halflif 1 ( 0.00%) 87 ( 0.00%) 87.00
everque 60 ( 0.00%) 8700 ( 0.00%) 145.00
quake 1 ( 0.00%) 87 ( 0.00%) 87.00
cuseeme 1 ( 0.00%) 94 ( 0.00%) 94.00
other 150575 ( 4.63%) 36250466 ( 1.97%) 240.75
icmp 132685 ( 4.08%) 10648518 ( 0.58%) 80.25
ipsec 187 ( 0.01%) 18634 ( 0.00%) 99.65
ip6 907 ( 0.03%) 316390 ( 0.02%) 348.83
other 32 ( 0.00%) 1920 ( 0.00%) 60.00
frag 4158 ( 0.13%) 4823611 ( 0.26%) 1160.08
tcpdump file: 200410241400.dump.gz (84.52 MB)