Traffic Trace Info
DumpFile: 200411171400.dump
FileSize: 617.12MB
Id: 200411171400
StartTime: Wed Nov 17 14:00:00 2004
EndTime: Wed Nov 17 14:15:01 2004
TotalTime: 900.67 seconds
TotalCapSize: 484.31MB CapLen: 96 bytes
# of packets: 8703576 (2346.79MB)
AvgRate: 21.86Mbps stddev:3.04M
IP flow (unique src/dst pair) Information
# of flows: 1323386 (avg. 6.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 2.5% 1.9% 1.3% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 536717
Top 10 bandwidth usage (bytes/total in %):
17.4% 9.2% 8.4% 7.3% 2.7% 2.6% 2.5% 2.0% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411171400.pktlen.png)
detailed numbers
[ 16- 31]: 48269
[ 32- 63]: 5260317
[ 64- 127]: 1518081
[ 128- 255]: 253220
[ 256- 511]: 240370
[ 512- 1023]: 206749
[ 1024- 2047]: 1176570
Protocol Breakdown
![[protocol breakdown chart]](200411171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8703576 (100.00%) 2460790541 (100.00%) 282.73
ip 8591959 ( 98.72%) 2457342124 ( 99.86%) 286.00
tcp 7616397 ( 87.51%) 2275311681 ( 92.46%) 298.74
http(s) 722741 ( 8.30%) 816159925 ( 33.17%) 1129.26
http(c) 1799804 ( 20.68%) 184329936 ( 7.49%) 102.42
squid 7020 ( 0.08%) 727453 ( 0.03%) 103.63
smtp 114827 ( 1.32%) 26356888 ( 1.07%) 229.54
nntp 41 ( 0.00%) 3079 ( 0.00%) 75.10
ftp 39411 ( 0.45%) 36131871 ( 1.47%) 916.80
pop3 5510 ( 0.06%) 1710377 ( 0.07%) 310.41
imap 1084 ( 0.01%) 104498 ( 0.00%) 96.40
telnet 758 ( 0.01%) 69410 ( 0.00%) 91.57
ssh 3320 ( 0.04%) 1231902 ( 0.05%) 371.05
dns 314 ( 0.00%) 24188 ( 0.00%) 77.03
bgp 216 ( 0.00%) 102094 ( 0.00%) 472.66
napster 1186 ( 0.01%) 149961 ( 0.01%) 126.44
realaud 2101 ( 0.02%) 127144 ( 0.01%) 60.52
rtsp 27249 ( 0.31%) 9758772 ( 0.40%) 358.13
icecast 22604 ( 0.26%) 2073094 ( 0.08%) 91.71
hotline 33 ( 0.00%) 2708 ( 0.00%) 82.06
other 4833250 ( 55.53%) 1195057747 ( 48.56%) 247.26
udp 735698 ( 8.45%) 161594845 ( 6.57%) 219.65
dns 447336 ( 5.14%) 96148028 ( 3.91%) 214.93
realaud 3013 ( 0.03%) 687578 ( 0.03%) 228.20
halflif 3 ( 0.00%) 256 ( 0.00%) 85.33
starcra 2 ( 0.00%) 514 ( 0.00%) 257.00
everque 42 ( 0.00%) 4974 ( 0.00%) 118.43
unreal 8 ( 0.00%) 598 ( 0.00%) 74.75
quake 1 ( 0.00%) 79 ( 0.00%) 79.00
other 278429 ( 3.20%) 64517194 ( 2.62%) 231.72
icmp 221420 ( 2.54%) 17328651 ( 0.70%) 78.26
ipsec 441 ( 0.01%) 92906 ( 0.00%) 210.67
ip6 920 ( 0.01%) 280077 ( 0.01%) 304.43
other 17083 ( 0.20%) 2733964 ( 0.11%) 160.04
frag 76 ( 0.00%) 13134 ( 0.00%) 172.82
tcpdump file: 200411171400.dump.gz (214.33 MB)