Traffic Trace Info
DumpFile: 200411291400.dump
FileSize: 811.89MB
Id: 200411291400
StartTime: Mon Nov 29 14:00:01 2004
EndTime: Mon Nov 29 14:15:01 2004
TotalTime: 899.98 seconds
TotalCapSize: 638.67MB CapLen: 96 bytes
# of packets: 11352268 (2735.67MB)
AvgRate: 25.50Mbps stddev:2.11M
IP flow (unique src/dst pair) Information
# of flows: 2377211 (avg. 4.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.0% 1.5% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 663464
Top 10 bandwidth usage (bytes/total in %):
19.3% 3.7% 3.6% 3.2% 2.9% 2.7% 2.3% 2.0% 2.0% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200411291400.pktlen.png)
detailed numbers
[ 16- 31]: 86993
[ 32- 63]: 6837003
[ 64- 127]: 2276745
[ 128- 255]: 226441
[ 256- 511]: 315898
[ 512- 1023]: 329304
[ 1024- 2047]: 1279884
Protocol Breakdown
![[protocol breakdown chart]](200411291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11352268 (100.00%) 2868554837 (100.00%) 252.69
ip 11161115 ( 98.32%) 2862670732 ( 99.79%) 256.49
tcp 9822261 ( 86.52%) 2596737819 ( 90.52%) 264.37
http(s) 903571 ( 7.96%) 958478044 ( 33.41%) 1060.77
http(c) 1808805 ( 15.93%) 213803701 ( 7.45%) 118.20
squid 10381 ( 0.09%) 3471792 ( 0.12%) 334.44
smtp 169847 ( 1.50%) 56216610 ( 1.96%) 330.98
nntp 56 ( 0.00%) 4902 ( 0.00%) 87.54
ftp 28104 ( 0.25%) 12180226 ( 0.42%) 433.40
pop3 7110 ( 0.06%) 2488550 ( 0.09%) 350.01
imap 2046 ( 0.02%) 180937 ( 0.01%) 88.43
telnet 3340 ( 0.03%) 365926 ( 0.01%) 109.56
ssh 298288 ( 2.63%) 136363526 ( 4.75%) 457.15
dns 725 ( 0.01%) 50092 ( 0.00%) 69.09
bgp 218 ( 0.00%) 94073 ( 0.00%) 431.53
napster 9268 ( 0.08%) 5326698 ( 0.19%) 574.74
realaud 36 ( 0.00%) 4821 ( 0.00%) 133.92
rtsp 44088 ( 0.39%) 8715672 ( 0.30%) 197.69
icecast 1093 ( 0.01%) 264716 ( 0.01%) 242.19
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 6476633 ( 57.05%) 1196729026 ( 41.72%) 184.78
udp 648556 ( 5.71%) 199702248 ( 6.96%) 307.92
dns 420452 ( 3.70%) 110952580 ( 3.87%) 263.89
realaud 7053 ( 0.06%) 3604277 ( 0.13%) 511.03
starcra 1 ( 0.00%) 321 ( 0.00%) 321.00
everque 61 ( 0.00%) 8806 ( 0.00%) 144.36
quake 1 ( 0.00%) 85 ( 0.00%) 85.00
other 213390 ( 1.88%) 84574492 ( 2.95%) 396.34
icmp 516849 ( 4.55%) 37078292 ( 1.29%) 71.74
ipsec 183 ( 0.00%) 17870 ( 0.00%) 97.65
ip6 1279 ( 0.01%) 405766 ( 0.01%) 317.25
other 171987 ( 1.52%) 28728737 ( 1.00%) 167.04
frag 4916 ( 0.04%) 6749696 ( 0.24%) 1373.01
tcpdump file: 200411291400.dump.gz (314.59 MB)