Traffic Trace Info
DumpFile: 200411111400.dump
FileSize: 458.61MB
Id: 200411111400
StartTime: Thu Nov 11 14:00:00 2004
EndTime: Thu Nov 11 14:15:01 2004
TotalTime: 900.36 seconds
TotalCapSize: 357.56MB CapLen: 96 bytes
# of packets: 6622198 (2387.06MB)
AvgRate: 22.24Mbps stddev:2.21M
IP flow (unique src/dst pair) Information
# of flows: 689684 (avg. 9.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.9% 1.6% 1.0% 0.9% 0.8% 0.8% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 415460
Top 10 bandwidth usage (bytes/total in %):
13.7% 12.8% 5.7% 5.7% 5.0% 5.0% 2.9% 2.8% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411111400.pktlen.png)
detailed numbers
[ 16- 31]: 38372
[ 32- 63]: 3031627
[ 64- 127]: 1553722
[ 128- 255]: 174134
[ 256- 511]: 282819
[ 512- 1023]: 270652
[ 1024- 2047]: 1270872
Protocol Breakdown
![[protocol breakdown chart]](200411111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6622198 (100.00%) 2503011652 (100.00%) 377.97
ip 6529508 ( 98.60%) 2500139086 ( 99.89%) 382.90
tcp 5459334 ( 82.44%) 2284994581 ( 91.29%) 418.55
http(s) 1097348 ( 16.57%) 1334807123 ( 53.33%) 1216.39
http(c) 1701248 ( 25.69%) 199001124 ( 7.95%) 116.97
squid 6241 ( 0.09%) 1296736 ( 0.05%) 207.78
smtp 192378 ( 2.91%) 47360389 ( 1.89%) 246.18
nntp 77 ( 0.00%) 7918 ( 0.00%) 102.83
ftp 108534 ( 1.64%) 17151393 ( 0.69%) 158.03
pop3 5734 ( 0.09%) 909863 ( 0.04%) 158.68
imap 1636 ( 0.02%) 134654 ( 0.01%) 82.31
telnet 2003 ( 0.03%) 191948 ( 0.01%) 95.83
ssh 45074 ( 0.68%) 4021435 ( 0.16%) 89.22
dns 432 ( 0.01%) 31076 ( 0.00%) 71.94
bgp 188 ( 0.00%) 69857 ( 0.00%) 371.58
napster 14619 ( 0.22%) 7815526 ( 0.31%) 534.61
realaud 2007 ( 0.03%) 120428 ( 0.00%) 60.00
rtsp 34726 ( 0.52%) 22805669 ( 0.91%) 656.73
icecast 28695 ( 0.43%) 2073634 ( 0.08%) 72.26
hotline 40172 ( 0.61%) 2653551 ( 0.11%) 66.05
other 2147260 ( 32.43%) 643486925 ( 25.71%) 299.68
udp 799637 ( 12.08%) 186576083 ( 7.45%) 233.33
dns 371503 ( 5.61%) 100497521 ( 4.02%) 270.52
realaud 8670 ( 0.13%) 4091981 ( 0.16%) 471.97
everque 55 ( 0.00%) 5200 ( 0.00%) 94.55
unreal 1 ( 0.00%) 69 ( 0.00%) 69.00
quake 20932 ( 0.32%) 2904289 ( 0.12%) 138.75
other 392921 ( 5.93%) 78852767 ( 3.15%) 200.68
icmp 160601 ( 2.43%) 12596522 ( 0.50%) 78.43
ipsec 182 ( 0.00%) 17824 ( 0.00%) 97.93
ip6 899 ( 0.01%) 256472 ( 0.01%) 285.29
other 108855 ( 1.64%) 15697604 ( 0.63%) 144.21
frag 644 ( 0.01%) 857161 ( 0.03%) 1331.00
tcpdump file: 200411111400.dump.gz (174.68 MB)