Traffic Trace Info
DumpFile: 200411051400.dump
FileSize: 392.69MB
Id: 200411051400
StartTime: Fri Nov 5 14:00:01 2004
EndTime: Fri Nov 5 14:15:00 2004
TotalTime: 899.72 seconds
TotalCapSize: 307.38MB CapLen: 96 bytes
# of packets: 5590762 (2293.26MB)
AvgRate: 21.38Mbps stddev:1.83M
IP flow (unique src/dst pair) Information
# of flows: 515203 (avg. 10.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.4% 1.6% 1.5% 1.4% 1.4% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 350396
Top 10 bandwidth usage (bytes/total in %):
10.1% 8.2% 3.9% 3.3% 2.6% 2.5% 2.5% 2.4% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411051400.pktlen.png)
detailed numbers
[ 16- 31]: 27631
[ 32- 63]: 2238638
[ 64- 127]: 1328691
[ 128- 255]: 193505
[ 256- 511]: 280552
[ 512- 1023]: 268656
[ 1024- 2047]: 1253089
Protocol Breakdown
![[protocol breakdown chart]](200411051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5590762 (100.00%) 2404656091 (100.00%) 430.11
ip 5525248 ( 98.83%) 2402628124 ( 99.92%) 434.85
tcp 4830728 ( 86.41%) 2236911148 ( 93.02%) 463.06
http(s) 804929 ( 14.40%) 889511835 ( 36.99%) 1105.08
http(c) 1566143 ( 28.01%) 194456473 ( 8.09%) 124.16
squid 8682 ( 0.16%) 5290620 ( 0.22%) 609.38
smtp 233122 ( 4.17%) 69217676 ( 2.88%) 296.92
nntp 683 ( 0.01%) 75962 ( 0.00%) 111.22
ftp 75088 ( 1.34%) 48206797 ( 2.00%) 642.00
pop3 7109 ( 0.13%) 3688122 ( 0.15%) 518.80
imap 1610 ( 0.03%) 144588 ( 0.01%) 89.81
telnet 1442 ( 0.03%) 130888 ( 0.01%) 90.77
ssh 2555 ( 0.05%) 392890 ( 0.02%) 153.77
dns 653 ( 0.01%) 57746 ( 0.00%) 88.43
bgp 180 ( 0.00%) 66227 ( 0.00%) 367.93
napster 2138 ( 0.04%) 254316 ( 0.01%) 118.95
realaud 236 ( 0.00%) 21419 ( 0.00%) 90.76
rtsp 160458 ( 2.87%) 99852689 ( 4.15%) 622.30
icecast 9838 ( 0.18%) 1154008 ( 0.05%) 117.30
hotline 38 ( 0.00%) 7005 ( 0.00%) 184.34
other 1933074 ( 34.58%) 923604074 ( 38.41%) 477.79
udp 560900 ( 10.03%) 154729127 ( 6.43%) 275.86
dns 401331 ( 7.18%) 107833229 ( 4.48%) 268.69
rip 2 ( 0.00%) 132 ( 0.00%) 66.00
realaud 2876 ( 0.05%) 226413 ( 0.01%) 78.72
halflif 2 ( 0.00%) 246 ( 0.00%) 123.00
everque 1 ( 0.00%) 92 ( 0.00%) 92.00
other 153303 ( 2.74%) 46553803 ( 1.94%) 303.67
icmp 132454 ( 2.37%) 10659572 ( 0.44%) 80.48
ipsec 178 ( 0.00%) 17460 ( 0.00%) 98.09
ip6 979 ( 0.02%) 310355 ( 0.01%) 317.01
other 9 ( 0.00%) 462 ( 0.00%) 51.33
frag 131 ( 0.00%) 92090 ( 0.00%) 702.98
tcpdump file: 200411051400.dump.gz (151.60 MB)