Traffic Trace Info
DumpFile: 200412161400.dump
FileSize: 756.76MB
Id: 200412161400
StartTime: Thu Dec 16 14:00:00 2004
EndTime: Thu Dec 16 14:15:00 2004
TotalTime: 900.15 seconds
TotalCapSize: 593.98MB CapLen: 96 bytes
# of packets: 10667876 (2795.72MB)
AvgRate: 26.06Mbps stddev:2.36M
IP flow (unique src/dst pair) Information
# of flows: 1923953 (avg. 5.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.3% 1.3% 1.1% 1.1% 1.0% 1.0% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 677237
Top 10 bandwidth usage (bytes/total in %):
14.4% 4.8% 4.4% 4.1% 3.3% 2.6% 2.3% 2.0% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412161400.pktlen.png)
detailed numbers
[ 16- 31]: 68887
[ 32- 63]: 6341805
[ 64- 127]: 2005717
[ 128- 255]: 279010
[ 256- 511]: 282114
[ 512- 1023]: 326784
[ 1024- 2047]: 1363559
Protocol Breakdown
![[protocol breakdown chart]](200412161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10667876 (100.00%) 2931528541 (100.00%) 274.80
ip 10516818 ( 98.58%) 2926879021 ( 99.84%) 278.30
tcp 9287718 ( 87.06%) 2675339870 ( 91.26%) 288.05
http(s) 1014996 ( 9.51%) 1045340196 ( 35.66%) 1029.90
http(c) 1681081 ( 15.76%) 206871536 ( 7.06%) 123.06
squid 3546 ( 0.03%) 383273 ( 0.01%) 108.09
smtp 182104 ( 1.71%) 66492058 ( 2.27%) 365.13
nntp 271 ( 0.00%) 23201 ( 0.00%) 85.61
ftp 18905 ( 0.18%) 3225498 ( 0.11%) 170.62
pop3 5522 ( 0.05%) 1164947 ( 0.04%) 210.96
imap 3180 ( 0.03%) 242039 ( 0.01%) 76.11
telnet 4558 ( 0.04%) 548824 ( 0.02%) 120.41
ssh 4464 ( 0.04%) 415300 ( 0.01%) 93.03
dns 3006 ( 0.03%) 220805 ( 0.01%) 73.45
bgp 237 ( 0.00%) 118222 ( 0.00%) 498.83
napster 30042 ( 0.28%) 10739749 ( 0.37%) 357.49
realaud 1996 ( 0.02%) 122310 ( 0.00%) 61.28
rtsp 49076 ( 0.46%) 33731899 ( 1.15%) 687.34
icecast 6086 ( 0.06%) 3106105 ( 0.11%) 510.37
hotline 52 ( 0.00%) 6370 ( 0.00%) 122.50
other 6232176 ( 58.42%) 1301006306 ( 44.38%) 208.76
udp 774330 ( 7.26%) 197727709 ( 6.74%) 255.35
dns 438062 ( 4.11%) 125565433 ( 4.28%) 286.64
realaud 13564 ( 0.13%) 6630051 ( 0.23%) 488.80
quake 1 ( 0.00%) 82 ( 0.00%) 82.00
other 314691 ( 2.95%) 65256999 ( 2.23%) 207.37
icmp 230030 ( 2.16%) 17257306 ( 0.59%) 75.02
ipsec 180 ( 0.00%) 17944 ( 0.00%) 99.69
ip6 375 ( 0.00%) 65223 ( 0.00%) 173.93
other 224185 ( 2.10%) 36470969 ( 1.24%) 162.68
frag 31 ( 0.00%) 15564 ( 0.00%) 502.06
tcpdump file: 200412161400.dump.gz (275.60 MB)