Traffic Trace Info
DumpFile: 200411031400.dump
FileSize: 360.73MB
Id: 200411031400
StartTime: Wed Nov 3 14:00:00 2004
EndTime: Wed Nov 3 14:15:00 2004
TotalTime: 899.85 seconds
TotalCapSize: 282.53MB CapLen: 96 bytes
# of packets: 5124888 (2077.47MB)
AvgRate: 19.37Mbps stddev:1.47M
IP flow (unique src/dst pair) Information
# of flows: 457179 (avg. 11.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 1.8% 1.6% 1.5% 1.5% 1.1% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 329514
Top 10 bandwidth usage (bytes/total in %):
14.5% 8.2% 8.2% 4.3% 3.8% 3.3% 3.2% 2.5% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411031400.pktlen.png)
detailed numbers
[ 16- 31]: 23636
[ 32- 63]: 1902716
[ 64- 127]: 1399615
[ 128- 255]: 201429
[ 256- 511]: 236673
[ 512- 1023]: 221180
[ 1024- 2047]: 1139639
Protocol Breakdown
![[protocol breakdown chart]](200411031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5124888 (100.00%) 2178380396 (100.00%) 425.06
ip 5067492 ( 98.88%) 2176600736 ( 99.92%) 429.52
tcp 4266974 ( 83.26%) 1974539168 ( 90.64%) 462.75
http(s) 671387 ( 13.10%) 725966814 ( 33.33%) 1081.29
http(c) 999428 ( 19.50%) 130908908 ( 6.01%) 130.98
squid 9690 ( 0.19%) 1211029 ( 0.06%) 124.98
smtp 118399 ( 2.31%) 21827063 ( 1.00%) 184.35
nntp 179 ( 0.00%) 19268 ( 0.00%) 107.64
ftp 51001 ( 1.00%) 15227610 ( 0.70%) 298.57
pop3 5735 ( 0.11%) 2671921 ( 0.12%) 465.90
imap 859 ( 0.02%) 390700 ( 0.02%) 454.83
telnet 2525 ( 0.05%) 223451 ( 0.01%) 88.50
ssh 54639 ( 1.07%) 8221190 ( 0.38%) 150.46
dns 1109 ( 0.02%) 97244 ( 0.00%) 87.69
bgp 172 ( 0.00%) 57932 ( 0.00%) 336.81
napster 17868 ( 0.35%) 9946557 ( 0.46%) 556.67
rtsp 512949 ( 10.01%) 210890157 ( 9.68%) 411.13
icecast 48341 ( 0.94%) 50831857 ( 2.33%) 1051.53
other 1753288 ( 34.21%) 795386322 ( 36.51%) 453.65
udp 664751 ( 12.97%) 191005788 ( 8.77%) 287.33
dns 362590 ( 7.08%) 98273401 ( 4.51%) 271.03
realaud 2105 ( 0.04%) 171170 ( 0.01%) 81.32
halflif 1 ( 0.00%) 91 ( 0.00%) 91.00
unreal 1 ( 0.00%) 62 ( 0.00%) 62.00
quake 6 ( 0.00%) 627 ( 0.00%) 104.50
other 295242 ( 5.76%) 91023532 ( 4.18%) 308.30
icmp 134778 ( 2.63%) 10783293 ( 0.50%) 80.01
ipsec 180 ( 0.00%) 17808 ( 0.00%) 98.93
ip6 760 ( 0.01%) 251503 ( 0.01%) 330.93
other 49 ( 0.00%) 3176 ( 0.00%) 64.82
frag 11246 ( 0.22%) 16234632 ( 0.75%) 1443.59
tcpdump file: 200411031400.dump.gz (140.93 MB)