Traffic Trace Info
DumpFile: 200411131400.dump
FileSize: 425.16MB
Id: 200411131400
StartTime: Sat Nov 13 14:00:00 2004
EndTime: Sat Nov 13 14:15:01 2004
TotalTime: 900.32 seconds
TotalCapSize: 333.31MB CapLen: 96 bytes
# of packets: 6018884 (2071.82MB)
AvgRate: 19.30Mbps stddev:2.86M
IP flow (unique src/dst pair) Information
# of flows: 869917 (avg. 6.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 3.8% 2.6% 2.2% 1.8% 1.8% 1.6% 1.5% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 394782
Top 10 bandwidth usage (bytes/total in %):
19.3% 8.6% 7.1% 6.7% 5.3% 4.3% 3.9% 2.6% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411131400.pktlen.png)
detailed numbers
[ 16- 31]: 25274
[ 32- 63]: 3513722
[ 64- 127]: 893651
[ 128- 255]: 121431
[ 256- 511]: 165469
[ 512- 1023]: 160758
[ 1024- 2047]: 1138579
Protocol Breakdown
![[protocol breakdown chart]](200411131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6018884 (100.00%) 2172459932 (100.00%) 360.94
ip 5961796 ( 99.05%) 2170698928 ( 99.92%) 364.10
tcp 5289868 ( 87.89%) 1982822153 ( 91.27%) 374.83
http(s) 599686 ( 9.96%) 709203579 ( 32.65%) 1182.62
http(c) 866169 ( 14.39%) 93034254 ( 4.28%) 107.41
squid 9779 ( 0.16%) 810192 ( 0.04%) 82.85
smtp 138314 ( 2.30%) 19586641 ( 0.90%) 141.61
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 50092 ( 0.83%) 22425901 ( 1.03%) 447.69
pop3 7786 ( 0.13%) 4259681 ( 0.20%) 547.09
imap 1357 ( 0.02%) 379990 ( 0.02%) 280.02
telnet 816 ( 0.01%) 80627 ( 0.00%) 98.81
ssh 369 ( 0.01%) 52274 ( 0.00%) 141.66
dns 1020 ( 0.02%) 78212 ( 0.00%) 76.68
bgp 183 ( 0.00%) 64137 ( 0.00%) 350.48
napster 2856 ( 0.05%) 768351 ( 0.04%) 269.03
realaud 19 ( 0.00%) 2619 ( 0.00%) 137.84
rtsp 15376 ( 0.26%) 6239151 ( 0.29%) 405.77
icecast 36678 ( 0.61%) 52949703 ( 2.44%) 1443.64
hotline 5 ( 0.00%) 776 ( 0.00%) 155.20
other 3542176 ( 58.85%) 1072299571 ( 49.36%) 302.72
udp 478800 ( 7.95%) 171705417 ( 7.90%) 358.62
dns 252176 ( 4.19%) 66850749 ( 3.08%) 265.10
realaud 2558 ( 0.04%) 395776 ( 0.02%) 154.72
halflif 464 ( 0.01%) 54245 ( 0.00%) 116.91
everque 100 ( 0.00%) 13923 ( 0.00%) 139.23
quake 2 ( 0.00%) 158 ( 0.00%) 79.00
other 220433 ( 3.66%) 103920004 ( 4.78%) 471.44
icmp 181643 ( 3.02%) 13899435 ( 0.64%) 76.52
ipsec 182 ( 0.00%) 17716 ( 0.00%) 97.34
ip6 1285 ( 0.02%) 444155 ( 0.02%) 345.65
other 10018 ( 0.17%) 1810052 ( 0.08%) 180.68
frag 4881 ( 0.08%) 7112148 ( 0.33%) 1457.11
tcpdump file: 200411131400.dump.gz (148.50 MB)