Traffic Trace Info
DumpFile: 200411271400.dump
FileSize: 664.44MB
Id: 200411271400
StartTime: Sat Nov 27 14:00:00 2004
EndTime: Sat Nov 27 14:15:00 2004
TotalTime: 899.87 seconds
TotalCapSize: 523.44MB CapLen: 96 bytes
# of packets: 9240509 (2261.55MB)
AvgRate: 21.08Mbps stddev:4.05M
IP flow (unique src/dst pair) Information
# of flows: 1988343 (avg. 4.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.0% 2.1% 2.0% 1.5% 1.4% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 580240
Top 10 bandwidth usage (bytes/total in %):
17.3% 7.6% 7.5% 4.8% 4.5% 3.9% 3.1% 2.3% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411271400.pktlen.png)
detailed numbers
[ 16- 31]: 43897
[ 32- 63]: 6158662
[ 64- 127]: 1428878
[ 128- 255]: 141512
[ 256- 511]: 177726
[ 512- 1023]: 166271
[ 1024- 2047]: 1123563
Protocol Breakdown
![[protocol breakdown chart]](200411271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9240509 (100.00%) 2371409564 (100.00%) 256.63
ip 9145197 ( 98.97%) 2368478216 ( 99.88%) 258.99
tcp 8318161 ( 90.02%) 2199586472 ( 92.75%) 264.43
http(s) 706556 ( 7.65%) 773585615 ( 32.62%) 1094.87
http(c) 1172012 ( 12.68%) 133754503 ( 5.64%) 114.12
squid 9278 ( 0.10%) 735486 ( 0.03%) 79.27
smtp 153646 ( 1.66%) 45022472 ( 1.90%) 293.03
nntp 105 ( 0.00%) 9699 ( 0.00%) 92.37
ftp 32838 ( 0.36%) 9815027 ( 0.41%) 298.89
pop3 4007 ( 0.04%) 2200299 ( 0.09%) 549.11
imap 2046 ( 0.02%) 165731 ( 0.01%) 81.00
telnet 943 ( 0.01%) 99562 ( 0.00%) 105.58
ssh 213405 ( 2.31%) 230719189 ( 9.73%) 1081.13
dns 964 ( 0.01%) 67474 ( 0.00%) 69.99
bgp 226 ( 0.00%) 101326 ( 0.00%) 448.35
napster 1840 ( 0.02%) 201624 ( 0.01%) 109.58
rtsp 26455 ( 0.29%) 21338688 ( 0.90%) 806.60
icecast 2325 ( 0.03%) 1022021 ( 0.04%) 439.58
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 5963599 ( 64.54%) 979796174 ( 41.32%) 164.30
udp 527774 ( 5.71%) 135514640 ( 5.71%) 256.77
dns 379942 ( 4.11%) 65965050 ( 2.78%) 173.62
realaud 559 ( 0.01%) 41333 ( 0.00%) 73.94
everque 24 ( 0.00%) 3486 ( 0.00%) 145.25
unreal 4587 ( 0.05%) 314127 ( 0.01%) 68.48
cuseeme 1 ( 0.00%) 85 ( 0.00%) 85.00
other 136647 ( 1.48%) 68985833 ( 2.91%) 504.85
icmp 175251 ( 1.90%) 13435071 ( 0.57%) 76.66
ipsec 181 ( 0.00%) 17622 ( 0.00%) 97.36
ip6 1156 ( 0.01%) 367323 ( 0.02%) 317.75
other 122674 ( 1.33%) 19557088 ( 0.82%) 159.42
frag 12 ( 0.00%) 720 ( 0.00%) 60.00
tcpdump file: 200411271400.dump.gz (234.89 MB)