Traffic Trace Info
DumpFile: 200412041400.dump
FileSize: 780.41MB
Id: 200412041400
StartTime: Sat Dec 4 14:00:00 2004
EndTime: Sat Dec 4 14:15:01 2004
TotalTime: 900.26 seconds
TotalCapSize: 614.42MB CapLen: 96 bytes
# of packets: 10878285 (2591.87MB)
AvgRate: 24.15Mbps stddev:2.76M
IP flow (unique src/dst pair) Information
# of flows: 2341107 (avg. 4.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 4.0% 2.6% 2.2% 1.9% 1.0% 1.0% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 594567
Top 10 bandwidth usage (bytes/total in %):
19.3% 11.8% 8.1% 5.2% 4.2% 4.2% 3.7% 2.6% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412041400.pktlen.png)
detailed numbers
[ 16- 31]: 58334
[ 32- 63]: 7374229
[ 64- 127]: 1569233
[ 128- 255]: 229299
[ 256- 511]: 205299
[ 512- 1023]: 152999
[ 1024- 2047]: 1288892
Protocol Breakdown
![[protocol breakdown chart]](200412041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10878285 (100.00%) 2717769482 (100.00%) 249.83
ip 10756422 ( 98.88%) 2714032502 ( 99.86%) 252.32
tcp 9852828 ( 90.57%) 2546214249 ( 93.69%) 258.42
http(s) 602331 ( 5.54%) 673764313 ( 24.79%) 1118.59
http(c) 1164338 ( 10.70%) 127110787 ( 4.68%) 109.17
squid 6904 ( 0.06%) 787235 ( 0.03%) 114.03
smtp 145530 ( 1.34%) 41528660 ( 1.53%) 285.36
nntp 16 ( 0.00%) 1046 ( 0.00%) 65.38
ftp 51071 ( 0.47%) 17830230 ( 0.66%) 349.13
pop3 5542 ( 0.05%) 2516494 ( 0.09%) 454.08
imap 1047 ( 0.01%) 79470 ( 0.00%) 75.90
telnet 585 ( 0.01%) 61460 ( 0.00%) 105.06
ssh 136142 ( 1.25%) 123014314 ( 4.53%) 903.57
dns 477 ( 0.00%) 34010 ( 0.00%) 71.30
bgp 224 ( 0.00%) 101894 ( 0.00%) 454.88
napster 12686 ( 0.12%) 6435678 ( 0.24%) 507.31
realaud 1375 ( 0.01%) 474475 ( 0.02%) 345.07
rtsp 31629 ( 0.29%) 33772085 ( 1.24%) 1067.76
icecast 23950 ( 0.22%) 34923876 ( 1.29%) 1458.20
other 7633799 ( 70.17%) 1482579733 ( 54.55%) 194.21
udp 554663 ( 5.10%) 126204508 ( 4.64%) 227.53
dns 318578 ( 2.93%) 80644750 ( 2.97%) 253.14
realaud 4191 ( 0.04%) 2020932 ( 0.07%) 482.21
quake 329 ( 0.00%) 111531 ( 0.00%) 339.00
other 223848 ( 2.06%) 42604273 ( 1.57%) 190.33
icmp 182985 ( 1.68%) 14108760 ( 0.52%) 77.10
ipsec 176 ( 0.00%) 17140 ( 0.00%) 97.39
ip6 563 ( 0.01%) 134753 ( 0.00%) 239.35
other 165207 ( 1.52%) 27353092 ( 1.01%) 165.57
frag 7779 ( 0.07%) 9142499 ( 0.34%) 1175.28
tcpdump file: 200412041400.dump.gz (271.29 MB)