Traffic Trace Info
DumpFile: 200411101400.dump
FileSize: 448.51MB
Id: 200411101400
StartTime: Wed Nov 10 14:00:01 2004
EndTime: Wed Nov 10 14:15:01 2004
TotalTime: 900.05 seconds
TotalCapSize: 350.41MB CapLen: 96 bytes
# of packets: 6428905 (2466.72MB)
AvgRate: 22.99Mbps stddev:2.15M
IP flow (unique src/dst pair) Information
# of flows: 776853 (avg. 8.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 1.9% 1.9% 1.8% 1.4% 1.4% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 469605
Top 10 bandwidth usage (bytes/total in %):
12.8% 5.9% 5.6% 5.4% 4.0% 4.0% 2.5% 2.4% 2.3% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411101400.pktlen.png)
detailed numbers
[ 16- 31]: 37405
[ 32- 63]: 2746918
[ 64- 127]: 1569719
[ 128- 255]: 210717
[ 256- 511]: 258423
[ 512- 1023]: 261549
[ 1024- 2047]: 1344174
Protocol Breakdown
![[protocol breakdown chart]](200411101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6428905 (100.00%) 2586543771 (100.00%) 402.33
ip 6340179 ( 98.62%) 2583797351 ( 99.89%) 407.53
tcp 5295673 ( 82.37%) 2324144214 ( 89.86%) 438.88
http(s) 849222 ( 13.21%) 1002616100 ( 38.76%) 1180.63
http(c) 1322960 ( 20.58%) 182832373 ( 7.07%) 138.20
squid 3865 ( 0.06%) 531813 ( 0.02%) 137.60
smtp 159762 ( 2.49%) 40905853 ( 1.58%) 256.04
nntp 61 ( 0.00%) 5663 ( 0.00%) 92.84
ftp 134650 ( 2.09%) 58900551 ( 2.28%) 437.43
pop3 13084 ( 0.20%) 3352416 ( 0.13%) 256.22
imap 1471 ( 0.02%) 123047 ( 0.00%) 83.65
telnet 1921 ( 0.03%) 193210 ( 0.01%) 100.58
ssh 53641 ( 0.83%) 3872944 ( 0.15%) 72.20
dns 418 ( 0.01%) 28430 ( 0.00%) 68.01
bgp 185 ( 0.00%) 72933 ( 0.00%) 394.23
napster 1041 ( 0.02%) 106817 ( 0.00%) 102.61
realaud 2072 ( 0.03%) 130742 ( 0.01%) 63.10
rtsp 65140 ( 1.01%) 53743543 ( 2.08%) 825.05
icecast 8510 ( 0.13%) 589434 ( 0.02%) 69.26
hotline 7 ( 0.00%) 849 ( 0.00%) 121.29
other 2649479 ( 41.21%) 975176746 ( 37.70%) 368.06
udp 756513 ( 11.77%) 225864284 ( 8.73%) 298.56
dns 446295 ( 6.94%) 97603212 ( 3.77%) 218.70
realaud 28653 ( 0.45%) 19045874 ( 0.74%) 664.71
everque 184 ( 0.00%) 26622 ( 0.00%) 144.68
quake 2 ( 0.00%) 168 ( 0.00%) 84.00
other 275068 ( 4.28%) 108973545 ( 4.21%) 396.17
icmp 136546 ( 2.12%) 10862575 ( 0.42%) 79.55
ipsec 173 ( 0.00%) 16990 ( 0.00%) 98.21
ip6 794 ( 0.01%) 235599 ( 0.01%) 296.72
other 150480 ( 2.34%) 22673689 ( 0.88%) 150.68
frag 60 ( 0.00%) 22296 ( 0.00%) 371.60
tcpdump file: 200411101400.dump.gz (170.49 MB)