Traffic Trace Info
DumpFile: 200411071400.dump
FileSize: 314.90MB
Id: 200411071400
StartTime: Sun Nov 7 14:00:00 2004
EndTime: Sun Nov 7 14:15:00 2004
TotalTime: 899.65 seconds
TotalCapSize: 247.62MB CapLen: 96 bytes
# of packets: 4409464 (1431.85MB)
AvgRate: 13.35Mbps stddev:2.37M
IP flow (unique src/dst pair) Information
# of flows: 664809 (avg. 6.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.5% 2.1% 1.9% 1.7% 1.6% 1.3% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 339513
Top 10 bandwidth usage (bytes/total in %):
29.6% 7.8% 4.0% 3.4% 3.0% 2.9% 2.8% 2.5% 2.5% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411071400.pktlen.png)
detailed numbers
[ 16- 31]: 13452
[ 32- 63]: 2324115
[ 64- 127]: 875737
[ 128- 255]: 137244
[ 256- 511]: 168599
[ 512- 1023]: 149740
[ 1024- 2047]: 740577
Protocol Breakdown
![[protocol breakdown chart]](200411071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4409464 (100.00%) 1501404878 (100.00%) 340.50
ip 4378433 ( 99.30%) 1500445973 ( 99.94%) 342.69
tcp 3808560 ( 86.37%) 1373849158 ( 91.50%) 360.73
http(s) 392192 ( 8.89%) 426288921 ( 28.39%) 1086.94
http(c) 679738 ( 15.42%) 75046214 ( 5.00%) 110.40
squid 4593 ( 0.10%) 425450 ( 0.03%) 92.63
smtp 275056 ( 6.24%) 56103110 ( 3.74%) 203.97
nntp 5 ( 0.00%) 370 ( 0.00%) 74.00
ftp 23450 ( 0.53%) 21679012 ( 1.44%) 924.48
pop3 2739 ( 0.06%) 1287862 ( 0.09%) 470.19
imap 940 ( 0.02%) 674770 ( 0.04%) 717.84
telnet 603 ( 0.01%) 41606 ( 0.00%) 69.00
ssh 11560 ( 0.26%) 1706593 ( 0.11%) 147.63
dns 764 ( 0.02%) 62372 ( 0.00%) 81.64
bgp 178 ( 0.00%) 61402 ( 0.00%) 344.96
napster 15761 ( 0.36%) 5053989 ( 0.34%) 320.66
realaud 5 ( 0.00%) 308 ( 0.00%) 61.60
rtsp 20178 ( 0.46%) 19298385 ( 1.29%) 956.41
icecast 7349 ( 0.17%) 7237432 ( 0.48%) 984.82
other 2363904 ( 53.61%) 758556062 ( 50.52%) 320.89
udp 421441 ( 9.56%) 114576627 ( 7.63%) 271.87
dns 263330 ( 5.97%) 69887253 ( 4.65%) 265.40
realaud 5197 ( 0.12%) 2219574 ( 0.15%) 427.09
everque 125 ( 0.00%) 19467 ( 0.00%) 155.74
other 151159 ( 3.43%) 42394830 ( 2.82%) 280.47
icmp 146975 ( 3.33%) 11537291 ( 0.77%) 78.50
ipsec 179 ( 0.00%) 17542 ( 0.00%) 98.00
ip6 957 ( 0.02%) 298903 ( 0.02%) 312.33
other 321 ( 0.01%) 166452 ( 0.01%) 518.54
frag 4 ( 0.00%) 240 ( 0.00%) 60.00
tcpdump file: 200411071400.dump.gz (114.73 MB)