Traffic Trace Info
DumpFile: 200410281400.dump
FileSize: 463.87MB
Id: 200410281400
StartTime: Thu Oct 28 14:00:00 2004
EndTime: Thu Oct 28 14:15:01 2004
TotalTime: 900.71 seconds
TotalCapSize: 362.29MB CapLen: 96 bytes
# of packets: 6657544 (2888.37MB)
AvgRate: 26.90Mbps stddev:1.60M
IP flow (unique src/dst pair) Information
# of flows: 466557 (avg. 14.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.0% 1.8% 1.7% 1.5% 1.5% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 329618
Top 10 bandwidth usage (bytes/total in %):
12.6% 6.7% 5.3% 4.8% 3.9% 3.1% 2.9% 2.6% 2.5% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410281400.pktlen.png)
detailed numbers
[ 16- 31]: 41602
[ 32- 63]: 2268249
[ 64- 127]: 1822587
[ 128- 255]: 273503
[ 256- 511]: 328038
[ 512- 1023]: 326006
[ 1024- 2047]: 1597559
Protocol Breakdown
![[protocol breakdown chart]](200410281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6657544 (100.00%) 3028671660 (100.00%) 454.92
ip 6553356 ( 98.44%) 3025435465 ( 99.89%) 461.66
tcp 5589805 ( 83.96%) 2791302016 ( 92.16%) 499.36
http(s) 1174570 ( 17.64%) 1328358570 ( 43.86%) 1130.93
http(c) 1798689 ( 27.02%) 232984290 ( 7.69%) 129.53
squid 6734 ( 0.10%) 1732109 ( 0.06%) 257.22
smtp 126914 ( 1.91%) 39941703 ( 1.32%) 314.71
nntp 536 ( 0.01%) 53974 ( 0.00%) 100.70
ftp 72587 ( 1.09%) 19600673 ( 0.65%) 270.03
pop3 9035 ( 0.14%) 2385870 ( 0.08%) 264.07
imap 1218 ( 0.02%) 96181 ( 0.00%) 78.97
telnet 3223 ( 0.05%) 336050 ( 0.01%) 104.27
ssh 266790 ( 4.01%) 32405722 ( 1.07%) 121.47
dns 1167 ( 0.02%) 129201 ( 0.00%) 110.71
bgp 184 ( 0.00%) 72450 ( 0.00%) 393.75
napster 25844 ( 0.39%) 13217355 ( 0.44%) 511.43
realaud 65 ( 0.00%) 3970 ( 0.00%) 61.08
rtsp 123538 ( 1.86%) 32523457 ( 1.07%) 263.27
icecast 26379 ( 0.40%) 29333969 ( 0.97%) 1112.02
hotline 59 ( 0.00%) 6996 ( 0.00%) 118.58
other 1915888 ( 28.78%) 1056880416 ( 34.90%) 551.64
udp 835735 ( 12.55%) 222978934 ( 7.36%) 266.81
dns 430405 ( 6.46%) 117456481 ( 3.88%) 272.90
realaud 9219 ( 0.14%) 4520243 ( 0.15%) 490.32
halflif 2 ( 0.00%) 214 ( 0.00%) 107.00
starcra 3 ( 0.00%) 322 ( 0.00%) 107.33
everque 89 ( 0.00%) 10776 ( 0.00%) 121.08
unreal 24 ( 0.00%) 1982 ( 0.00%) 82.58
quake 17645 ( 0.27%) 6666512 ( 0.22%) 377.81
cuseeme 2 ( 0.00%) 247 ( 0.00%) 123.50
other 370993 ( 5.57%) 93940522 ( 3.10%) 253.21
icmp 125768 ( 1.89%) 10448010 ( 0.34%) 83.07
ipsec 203 ( 0.00%) 23466 ( 0.00%) 115.60
ip6 1829 ( 0.03%) 682049 ( 0.02%) 372.91
other 16 ( 0.00%) 990 ( 0.00%) 61.88
frag 908 ( 0.01%) 854476 ( 0.03%) 941.05
tcpdump file: 200410281400.dump.gz (184.18 MB)