Traffic Trace Info
DumpFile: 200411141400.dump
FileSize: 463.61MB
Id: 200411141400
StartTime: Sun Nov 14 14:00:00 2004
EndTime: Sun Nov 14 14:15:00 2004
TotalTime: 899.34 seconds
TotalCapSize: 364.48MB CapLen: 96 bytes
# of packets: 6496968 (1768.59MB)
AvgRate: 16.50Mbps stddev:3.80M
IP flow (unique src/dst pair) Information
# of flows: 1346180 (avg. 4.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.6% 2.6% 2.4% 2.3% 2.2% 1.4% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 564673
Top 10 bandwidth usage (bytes/total in %):
18.1% 11.6% 8.6% 5.8% 3.5% 3.4% 2.7% 2.7% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411141400.pktlen.png)
detailed numbers
[ 16- 31]: 23126
[ 32- 63]: 4163243
[ 64- 127]: 942075
[ 128- 255]: 157880
[ 256- 511]: 160807
[ 512- 1023]: 153674
[ 1024- 2047]: 896163
Protocol Breakdown
![[protocol breakdown chart]](200411141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6496968 (100.00%) 1854503208 (100.00%) 285.44
ip 6446474 ( 99.22%) 1852949146 ( 99.92%) 287.44
tcp 5637713 ( 86.77%) 1687641675 ( 91.00%) 299.35
http(s) 345620 ( 5.32%) 364416826 ( 19.65%) 1054.39
http(c) 504759 ( 7.77%) 49708062 ( 2.68%) 98.48
squid 16128 ( 0.25%) 16679730 ( 0.90%) 1034.21
smtp 104099 ( 1.60%) 16349554 ( 0.88%) 157.06
nntp 4 ( 0.00%) 267 ( 0.00%) 66.75
ftp 54658 ( 0.84%) 17511426 ( 0.94%) 320.38
pop3 3143 ( 0.05%) 1667672 ( 0.09%) 530.60
imap 936 ( 0.01%) 489199 ( 0.03%) 522.65
telnet 124 ( 0.00%) 8822 ( 0.00%) 71.15
ssh 1379 ( 0.02%) 140457 ( 0.01%) 101.85
dns 412 ( 0.01%) 30464 ( 0.00%) 73.94
bgp 189 ( 0.00%) 79091 ( 0.00%) 418.47
napster 3758 ( 0.06%) 329177 ( 0.02%) 87.59
realaud 8450 ( 0.13%) 9580432 ( 0.52%) 1133.78
rtsp 2225 ( 0.03%) 530528 ( 0.03%) 238.44
icecast 42460 ( 0.65%) 62305942 ( 3.36%) 1467.40
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 4536339 ( 69.82%) 1147368824 ( 61.87%) 252.93
udp 613559 ( 9.44%) 149380252 ( 8.06%) 243.47
dns 230113 ( 3.54%) 59001021 ( 3.18%) 256.40
realaud 177 ( 0.00%) 37627 ( 0.00%) 212.58
quake 1 ( 0.00%) 86 ( 0.00%) 86.00
other 379538 ( 5.84%) 90214532 ( 4.86%) 237.70
icmp 186614 ( 2.87%) 14390474 ( 0.78%) 77.11
ipsec 722 ( 0.01%) 116811 ( 0.01%) 161.79
ip6 1108 ( 0.02%) 368710 ( 0.02%) 332.77
other 6758 ( 0.10%) 1051224 ( 0.06%) 155.55
frag 51 ( 0.00%) 3034 ( 0.00%) 59.49
tcpdump file: 200411141400.dump.gz (161.36 MB)