Traffic Trace Info
DumpFile: 200410301400.dump
FileSize: 322.57MB
Id: 200410301400
StartTime: Sat Oct 30 14:00:00 2004
EndTime: Sat Oct 30 14:15:00 2004
TotalTime: 899.81 seconds
TotalCapSize: 252.50MB CapLen: 96 bytes
# of packets: 4591703 (2182.51MB)
AvgRate: 20.34Mbps stddev:1.95M
IP flow (unique src/dst pair) Information
# of flows: 445754 (avg. 10.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.7% 3.2% 1.8% 1.8% 1.5% 1.5% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 321521
Top 10 bandwidth usage (bytes/total in %):
23.6% 11.6% 7.1% 4.2% 3.9% 3.9% 3.6% 3.3% 2.9% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200410301400.pktlen.png)
detailed numbers
[ 16- 31]: 20005
[ 32- 63]: 1716998
[ 64- 127]: 1051312
[ 128- 255]: 138326
[ 256- 511]: 205984
[ 512- 1023]: 193111
[ 1024- 2047]: 1265967
Protocol Breakdown
![[protocol breakdown chart]](200410301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4591703 (100.00%) 2288525941 (100.00%) 498.40
ip 4544103 ( 98.96%) 2287051904 ( 99.94%) 503.30
tcp 3924152 ( 85.46%) 2141854710 ( 93.59%) 545.81
http(s) 625190 ( 13.62%) 724644165 ( 31.66%) 1159.08
http(c) 988788 ( 21.53%) 114796494 ( 5.02%) 116.10
squid 2491 ( 0.05%) 425629 ( 0.02%) 170.87
smtp 115038 ( 2.51%) 17243714 ( 0.75%) 149.90
nntp 52 ( 0.00%) 4064 ( 0.00%) 78.15
ftp 87067 ( 1.90%) 10651138 ( 0.47%) 122.33
pop3 5295 ( 0.12%) 2434784 ( 0.11%) 459.83
imap 761 ( 0.02%) 64137 ( 0.00%) 84.28
telnet 274 ( 0.01%) 25320 ( 0.00%) 92.41
ssh 1127 ( 0.02%) 106612 ( 0.00%) 94.60
dns 361 ( 0.01%) 29273 ( 0.00%) 81.09
bgp 172 ( 0.00%) 57566 ( 0.00%) 334.69
napster 11995 ( 0.26%) 2651481 ( 0.12%) 221.05
rtsp 123384 ( 2.69%) 99382275 ( 4.34%) 805.47
icecast 58515 ( 1.27%) 57926226 ( 2.53%) 989.94
other 1887542 ( 41.11%) 1110863337 ( 48.54%) 588.52
udp 457480 ( 9.96%) 131700265 ( 5.75%) 287.88
dns 293167 ( 6.38%) 85289426 ( 3.73%) 290.92
realaud 5564 ( 0.12%) 2042856 ( 0.09%) 367.16
halflif 2 ( 0.00%) 124 ( 0.00%) 62.00
everque 13 ( 0.00%) 876 ( 0.00%) 67.38
other 156419 ( 3.41%) 44288123 ( 1.94%) 283.14
icmp 160644 ( 3.50%) 12710260 ( 0.56%) 79.12
ipsec 185 ( 0.00%) 18510 ( 0.00%) 100.05
ip6 693 ( 0.02%) 186511 ( 0.01%) 269.14
other 949 ( 0.02%) 581648 ( 0.03%) 612.91
frag 14 ( 0.00%) 2232 ( 0.00%) 159.43
tcpdump file: 200410301400.dump.gz (123.31 MB)