Traffic Trace Info
DumpFile: 200411061400.dump
FileSize: 367.57MB
Id: 200411061400
StartTime: Sat Nov 6 14:00:00 2004
EndTime: Sat Nov 6 14:15:00 2004
TotalTime: 900.10 seconds
TotalCapSize: 288.38MB CapLen: 96 bytes
# of packets: 5189474 (1982.19MB)
AvgRate: 18.47Mbps stddev:2.18M
IP flow (unique src/dst pair) Information
# of flows: 590162 (avg. 8.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.1% 2.9% 2.4% 1.9% 1.8% 1.5% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 304913
Top 10 bandwidth usage (bytes/total in %):
25.3% 13.4% 5.6% 3.9% 3.8% 3.2% 3.0% 3.0% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411061400.pktlen.png)
detailed numbers
[ 16- 31]: 20468
[ 32- 63]: 2290271
[ 64- 127]: 1148212
[ 128- 255]: 174017
[ 256- 511]: 240677
[ 512- 1023]: 272546
[ 1024- 2047]: 1043283
Protocol Breakdown
![[protocol breakdown chart]](200411061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5189474 (100.00%) 2078476285 (100.00%) 400.52
ip 5141690 ( 99.08%) 2076998702 ( 99.93%) 403.95
tcp 4435226 ( 85.47%) 1914522333 ( 92.11%) 431.66
http(s) 654681 ( 12.62%) 712878810 ( 34.30%) 1088.89
http(c) 973836 ( 18.77%) 111324360 ( 5.36%) 114.32
squid 4801 ( 0.09%) 1333325 ( 0.06%) 277.72
smtp 201628 ( 3.89%) 38350666 ( 1.85%) 190.21
nntp 85 ( 0.00%) 6622 ( 0.00%) 77.91
ftp 22470 ( 0.43%) 13647925 ( 0.66%) 607.38
pop3 13232 ( 0.25%) 10532412 ( 0.51%) 795.98
imap 1336 ( 0.03%) 120574 ( 0.01%) 90.25
telnet 411 ( 0.01%) 44900 ( 0.00%) 109.25
ssh 3323 ( 0.06%) 392988 ( 0.02%) 118.26
dns 596 ( 0.01%) 41764 ( 0.00%) 70.07
bgp 175 ( 0.00%) 58076 ( 0.00%) 331.86
napster 14087 ( 0.27%) 5205644 ( 0.25%) 369.54
realaud 21 ( 0.00%) 1302 ( 0.00%) 62.00
rtsp 83429 ( 1.61%) 79049262 ( 3.80%) 947.50
icecast 62334 ( 1.20%) 46816552 ( 2.25%) 751.06
other 2383558 ( 45.93%) 894198192 ( 43.02%) 375.15
udp 564794 ( 10.88%) 151016245 ( 7.27%) 267.38
dns 336031 ( 6.48%) 89172605 ( 4.29%) 265.37
realaud 2285 ( 0.04%) 167388 ( 0.01%) 73.26
everque 29 ( 0.00%) 4497 ( 0.00%) 155.07
quake 1 ( 0.00%) 77 ( 0.00%) 77.00
other 223218 ( 4.30%) 61557742 ( 2.96%) 275.77
icmp 139629 ( 2.69%) 11073939 ( 0.53%) 79.31
ipsec 183 ( 0.00%) 17978 ( 0.00%) 98.24
ip6 1114 ( 0.02%) 304670 ( 0.01%) 273.49
other 744 ( 0.01%) 63537 ( 0.00%) 85.40
frag 35 ( 0.00%) 16064 ( 0.00%) 458.97
tcpdump file: 200411061400.dump.gz (132.25 MB)