Traffic Trace Info
DumpFile: 200411231400.dump
FileSize: 605.66MB
Id: 200411231400
StartTime: Tue Nov 23 14:00:00 2004
EndTime: Tue Nov 23 14:15:00 2004
TotalTime: 900.20 seconds
TotalCapSize: 475.86MB CapLen: 96 bytes
# of packets: 8506623 (2525.53MB)
AvgRate: 23.54Mbps stddev:2.91M
IP flow (unique src/dst pair) Information
# of flows: 1175587 (avg. 7.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 2.2% 2.1% 1.8% 1.6% 1.6% 1.4% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 565435
Top 10 bandwidth usage (bytes/total in %):
13.3% 5.1% 3.7% 3.6% 3.6% 3.6% 3.2% 2.8% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411231400.pktlen.png)
detailed numbers
[ 16- 31]: 50971
[ 32- 63]: 4063542
[ 64- 127]: 2219292
[ 128- 255]: 305962
[ 256- 511]: 232067
[ 512- 1023]: 388591
[ 1024- 2047]: 1246198
Protocol Breakdown
![[protocol breakdown chart]](200411231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8506623 (100.00%) 2648210077 (100.00%) 311.31
ip 8389233 ( 98.62%) 2644583907 ( 99.86%) 315.24
tcp 7338943 ( 86.27%) 2396804003 ( 90.51%) 326.59
http(s) 797704 ( 9.38%) 910608872 ( 34.39%) 1141.54
http(c) 1182037 ( 13.90%) 134446650 ( 5.08%) 113.74
squid 4970 ( 0.06%) 533777 ( 0.02%) 107.40
smtp 166765 ( 1.96%) 37705533 ( 1.42%) 226.10
nntp 7 ( 0.00%) 1008 ( 0.00%) 144.00
ftp 57877 ( 0.68%) 21093944 ( 0.80%) 364.46
pop3 4477 ( 0.05%) 1144932 ( 0.04%) 255.74
imap 729 ( 0.01%) 61466 ( 0.00%) 84.32
telnet 2009 ( 0.02%) 225138 ( 0.01%) 112.06
ssh 675058 ( 7.94%) 84037097 ( 3.17%) 124.49
dns 1022 ( 0.01%) 77585 ( 0.00%) 75.91
bgp 208 ( 0.00%) 91987 ( 0.00%) 442.25
napster 8248 ( 0.10%) 845781 ( 0.03%) 102.54
realaud 2974 ( 0.03%) 206297 ( 0.01%) 69.37
rtsp 73218 ( 0.86%) 72334604 ( 2.73%) 987.93
icecast 3857 ( 0.05%) 2754536 ( 0.10%) 714.17
other 4318909 ( 50.77%) 1129310045 ( 42.64%) 261.48
udp 703818 ( 8.27%) 204979683 ( 7.74%) 291.24
dns 462179 ( 5.43%) 107636267 ( 4.06%) 232.89
realaud 13301 ( 0.16%) 6670817 ( 0.25%) 501.53
halflif 1 ( 0.00%) 85 ( 0.00%) 85.00
cuseeme 1 ( 0.00%) 85 ( 0.00%) 85.00
other 220680 ( 2.59%) 89361858 ( 3.37%) 404.94
icmp 147180 ( 1.73%) 11583604 ( 0.44%) 78.70
ipsec 490 ( 0.01%) 73532 ( 0.00%) 150.07
ip6 1295 ( 0.02%) 398773 ( 0.02%) 307.93
other 197507 ( 2.32%) 30744312 ( 1.16%) 155.66
frag 6728 ( 0.08%) 9443420 ( 0.36%) 1403.60
tcpdump file: 200411231400.dump.gz (226.79 MB)