Traffic Trace Info
DumpFile: 200411091400.dump
FileSize: 445.08MB
Id: 200411091400
StartTime: Tue Nov 9 14:00:00 2004
EndTime: Tue Nov 9 14:15:00 2004
TotalTime: 899.80 seconds
TotalCapSize: 347.94MB CapLen: 96 bytes
# of packets: 6366225 (2500.44MB)
AvgRate: 23.31Mbps stddev:1.86M
IP flow (unique src/dst pair) Information
# of flows: 688082 (avg. 9.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.7% 3.5% 2.4% 1.9% 1.7% 1.4% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 475364
Top 10 bandwidth usage (bytes/total in %):
25.8% 7.2% 5.5% 4.7% 3.6% 2.8% 2.5% 2.1% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411091400.pktlen.png)
detailed numbers
[ 16- 31]: 37624
[ 32- 63]: 2715533
[ 64- 127]: 1430813
[ 128- 255]: 277515
[ 256- 511]: 282279
[ 512- 1023]: 259069
[ 1024- 2047]: 1363392
Protocol Breakdown
![[protocol breakdown chart]](200411091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6366225 (100.00%) 2621902935 (100.00%) 411.85
ip 6274034 ( 98.55%) 2619042730 ( 99.89%) 417.44
tcp 5350177 ( 84.04%) 2370555089 ( 90.41%) 443.08
http(s) 862872 ( 13.55%) 978203357 ( 37.31%) 1133.66
http(c) 1513281 ( 23.77%) 189417594 ( 7.22%) 125.17
squid 11668 ( 0.18%) 3052485 ( 0.12%) 261.61
smtp 174449 ( 2.74%) 46921625 ( 1.79%) 268.97
nntp 40 ( 0.00%) 3794 ( 0.00%) 94.85
ftp 22932 ( 0.36%) 2684037 ( 0.10%) 117.04
pop3 6584 ( 0.10%) 1332843 ( 0.05%) 202.44
imap 1934 ( 0.03%) 171889 ( 0.01%) 88.88
telnet 1830 ( 0.03%) 197578 ( 0.01%) 107.97
ssh 5272 ( 0.08%) 791504 ( 0.03%) 150.13
dns 429 ( 0.01%) 34861 ( 0.00%) 81.26
bgp 181 ( 0.00%) 67033 ( 0.00%) 370.35
napster 8348 ( 0.13%) 1456704 ( 0.06%) 174.50
realaud 2039 ( 0.03%) 123527 ( 0.00%) 60.58
rtsp 68630 ( 1.08%) 45742459 ( 1.74%) 666.51
icecast 17874 ( 0.28%) 3959642 ( 0.15%) 221.53
other 2620675 ( 41.17%) 1095332478 ( 41.78%) 417.96
udp 791019 ( 12.43%) 237727900 ( 9.07%) 300.53
dns 399372 ( 6.27%) 103404960 ( 3.94%) 258.92
realaud 9382 ( 0.15%) 4601188 ( 0.18%) 490.43
halflif 2 ( 0.00%) 688 ( 0.00%) 344.00
everque 98 ( 0.00%) 15164 ( 0.00%) 154.73
quake 1131 ( 0.02%) 204080 ( 0.01%) 180.44
other 374653 ( 5.89%) 129226552 ( 4.93%) 344.92
icmp 131590 ( 2.07%) 10396099 ( 0.40%) 79.00
ipsec 173 ( 0.00%) 17038 ( 0.00%) 98.49
ip6 1061 ( 0.02%) 345920 ( 0.01%) 326.03
other 14 ( 0.00%) 684 ( 0.00%) 48.86
frag 11669 ( 0.18%) 16272413 ( 0.62%) 1394.50
tcpdump file: 200411091400.dump.gz (170.59 MB)