Traffic Trace Info
DumpFile: 200411251400.dump
FileSize: 644.84MB
Id: 200411251400
StartTime: Thu Nov 25 14:00:00 2004
EndTime: Thu Nov 25 14:15:00 2004
TotalTime: 899.84 seconds
TotalCapSize: 504.27MB CapLen: 96 bytes
# of packets: 9212085 (2752.96MB)
AvgRate: 25.66Mbps stddev:2.31M
IP flow (unique src/dst pair) Information
# of flows: 1296870 (avg. 7.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.7% 1.7% 1.4% 1.2% 1.0% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 589011
Top 10 bandwidth usage (bytes/total in %):
13.3% 6.5% 4.3% 3.7% 3.5% 3.5% 2.8% 2.6% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411251400.pktlen.png)
detailed numbers
[ 16- 31]: 67113
[ 32- 63]: 4801653
[ 64- 127]: 2053044
[ 128- 255]: 297001
[ 256- 511]: 292802
[ 512- 1023]: 291031
[ 1024- 2047]: 1409441
Protocol Breakdown
![[protocol breakdown chart]](200411251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9212085 (100.00%) 2886684992 (100.00%) 313.36
ip 9055829 ( 98.30%) 2881854761 ( 99.83%) 318.23
tcp 7821458 ( 84.90%) 2616085861 ( 90.63%) 334.48
http(s) 985446 ( 10.70%) 1076093810 ( 37.28%) 1091.99
http(c) 1931719 ( 20.97%) 242255794 ( 8.39%) 125.41
squid 8200 ( 0.09%) 683269 ( 0.02%) 83.33
smtp 168664 ( 1.83%) 64594872 ( 2.24%) 382.98
nntp 82 ( 0.00%) 7797 ( 0.00%) 95.09
ftp 63100 ( 0.68%) 46096719 ( 1.60%) 730.53
pop3 16249 ( 0.18%) 4109693 ( 0.14%) 252.92
imap 2024 ( 0.02%) 215928 ( 0.01%) 106.68
telnet 5187 ( 0.06%) 626280 ( 0.02%) 120.74
ssh 146061 ( 1.59%) 12070583 ( 0.42%) 82.64
dns 1284 ( 0.01%) 118749 ( 0.00%) 92.48
bgp 207 ( 0.00%) 83857 ( 0.00%) 405.11
napster 65396 ( 0.71%) 14420395 ( 0.50%) 220.51
realaud 11 ( 0.00%) 1191 ( 0.00%) 108.27
rtsp 72632 ( 0.79%) 65849401 ( 2.28%) 906.62
icecast 5812 ( 0.06%) 401498 ( 0.01%) 69.08
hotline 99 ( 0.00%) 11839 ( 0.00%) 119.59
other 4297141 ( 46.65%) 1086668197 ( 37.64%) 252.88
udp 831183 ( 9.02%) 213587719 ( 7.40%) 256.97
dns 498797 ( 5.41%) 107833263 ( 3.74%) 216.19
realaud 8568 ( 0.09%) 5129737 ( 0.18%) 598.71
everque 1 ( 0.00%) 86 ( 0.00%) 86.00
other 313644 ( 3.40%) 100000532 ( 3.46%) 318.83
icmp 154918 ( 1.68%) 12086041 ( 0.42%) 78.02
ipsec 167 ( 0.00%) 16366 ( 0.00%) 98.00
ip6 975 ( 0.01%) 254496 ( 0.01%) 261.02
other 247128 ( 2.68%) 39824278 ( 1.38%) 161.15
frag 7499 ( 0.08%) 7365224 ( 0.26%) 982.16
tcpdump file: 200411251400.dump.gz (242.95 MB)