Traffic Trace Info
DumpFile: 200411281400.dump
FileSize: 809.56MB
Id: 200411281400
StartTime: Sun Nov 28 14:00:01 2004
EndTime: Sun Nov 28 14:15:00 2004
TotalTime: 899.36 seconds
TotalCapSize: 639.04MB CapLen: 96 bytes
# of packets: 11175296 (2026.82MB)
AvgRate: 18.90Mbps stddev:3.97M
IP flow (unique src/dst pair) Information
# of flows: 2900196 (avg. 3.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.0% 1.6% 1.6% 1.2% 1.1% 1.1% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 581448
Top 10 bandwidth usage (bytes/total in %):
25.0% 5.9% 4.4% 4.4% 3.7% 2.0% 2.0% 2.0% 2.0% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411281400.pktlen.png)
detailed numbers
[ 16- 31]: 46783
[ 32- 63]: 7884378
[ 64- 127]: 1734304
[ 128- 255]: 238118
[ 256- 511]: 169430
[ 512- 1023]: 266909
[ 1024- 2047]: 835374
Protocol Breakdown
![[protocol breakdown chart]](200411281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11175296 (100.00%) 2125269855 (100.00%) 190.18
ip 11071936 ( 99.08%) 2122086360 ( 99.85%) 191.66
tcp 9791806 ( 87.62%) 1872716140 ( 88.12%) 191.25
http(s) 401954 ( 3.60%) 441477064 ( 20.77%) 1098.33
http(c) 634736 ( 5.68%) 61560115 ( 2.90%) 96.99
squid 8882 ( 0.08%) 4435820 ( 0.21%) 499.42
smtp 146981 ( 1.32%) 36584262 ( 1.72%) 248.90
nntp 39 ( 0.00%) 2995 ( 0.00%) 76.79
ftp 69316 ( 0.62%) 51416604 ( 2.42%) 741.77
pop3 4331 ( 0.04%) 3165520 ( 0.15%) 730.90
imap 2616 ( 0.02%) 183614 ( 0.01%) 70.19
telnet 526 ( 0.00%) 56516 ( 0.00%) 107.44
ssh 116141 ( 1.04%) 8214252 ( 0.39%) 70.73
dns 717 ( 0.01%) 48602 ( 0.00%) 67.79
bgp 221 ( 0.00%) 99172 ( 0.00%) 448.74
napster 6148 ( 0.06%) 2245509 ( 0.11%) 365.24
realaud 854 ( 0.01%) 441856 ( 0.02%) 517.40
rtsp 17075 ( 0.15%) 17206900 ( 0.81%) 1007.72
icecast 6621 ( 0.06%) 562788 ( 0.03%) 85.00
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 8349812 ( 74.72%) 1244168146 ( 58.54%) 149.01
udp 613399 ( 5.49%) 194505728 ( 9.15%) 317.09
dns 217787 ( 1.95%) 46608018 ( 2.19%) 214.01
realaud 34756 ( 0.31%) 35261737 ( 1.66%) 1014.55
everque 77 ( 0.00%) 17509 ( 0.00%) 227.39
other 354957 ( 3.18%) 112166856 ( 5.28%) 316.00
icmp 543152 ( 4.86%) 38875844 ( 1.83%) 71.57
ipsec 175 ( 0.00%) 17118 ( 0.00%) 97.82
ip6 921 ( 0.01%) 238861 ( 0.01%) 259.35
other 122483 ( 1.10%) 15732669 ( 0.74%) 128.45
frag 2182 ( 0.02%) 3135487 ( 0.15%) 1436.98
tcpdump file: 200411281400.dump.gz (291.80 MB)