Traffic Trace Info
DumpFile: 200412171400.dump
FileSize: 688.13MB
Id: 200412171400
StartTime: Fri Dec 17 14:00:00 2004
EndTime: Fri Dec 17 14:15:00 2004
TotalTime: 900.02 seconds
TotalCapSize: 540.15MB CapLen: 96 bytes
# of packets: 9697596 (2375.41MB)
AvgRate: 22.14Mbps stddev:3.36M
IP flow (unique src/dst pair) Information
# of flows: 1752334 (avg. 5.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.0% 1.5% 1.0% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 670255
Top 10 bandwidth usage (bytes/total in %):
8.7% 8.0% 5.0% 4.0% 3.8% 3.8% 2.8% 2.6% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412171400.pktlen.png)
detailed numbers
[ 16- 31]: 54628
[ 32- 63]: 5934612
[ 64- 127]: 1879222
[ 128- 255]: 182149
[ 256- 511]: 220657
[ 512- 1023]: 307663
[ 1024- 2047]: 1118665
Protocol Breakdown
![[protocol breakdown chart]](200412171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9697596 (100.00%) 2490802954 (100.00%) 256.85
ip 9572933 ( 98.71%) 2486954894 ( 99.85%) 259.79
tcp 8457387 ( 87.21%) 2282674136 ( 91.64%) 269.90
http(s) 898265 ( 9.26%) 948927480 ( 38.10%) 1056.40
http(c) 1488220 ( 15.35%) 162601382 ( 6.53%) 109.26
squid 10376 ( 0.11%) 3831359 ( 0.15%) 369.25
smtp 272782 ( 2.81%) 119956735 ( 4.82%) 439.75
nntp 251 ( 0.00%) 23636 ( 0.00%) 94.17
ftp 17703 ( 0.18%) 1745301 ( 0.07%) 98.59
pop3 8132 ( 0.08%) 2335143 ( 0.09%) 287.15
imap 2330 ( 0.02%) 1094018 ( 0.04%) 469.54
telnet 1552 ( 0.02%) 157327 ( 0.01%) 101.37
ssh 2488 ( 0.03%) 566770 ( 0.02%) 227.80
dns 691 ( 0.01%) 52832 ( 0.00%) 76.46
bgp 233 ( 0.00%) 112227 ( 0.00%) 481.66
napster 12091 ( 0.12%) 6312724 ( 0.25%) 522.10
rtsp 48563 ( 0.50%) 37646951 ( 1.51%) 775.22
icecast 8555 ( 0.09%) 914808 ( 0.04%) 106.93
hotline 15 ( 0.00%) 1852 ( 0.00%) 123.47
other 5645950 ( 58.22%) 995058333 ( 39.95%) 176.24
udp 678753 ( 7.00%) 156358410 ( 6.28%) 230.36
dns 430414 ( 4.44%) 99564966 ( 4.00%) 231.32
realaud 13041 ( 0.13%) 8438199 ( 0.34%) 647.05
halflif 1 ( 0.00%) 93 ( 0.00%) 93.00
starcra 1 ( 0.00%) 86 ( 0.00%) 86.00
everque 146 ( 0.00%) 16173 ( 0.00%) 110.77
other 227737 ( 2.35%) 48086437 ( 1.93%) 211.15
icmp 246449 ( 2.54%) 21352931 ( 0.86%) 86.64
ipsec 1836 ( 0.02%) 323832 ( 0.01%) 176.38
ip6 384 ( 0.00%) 67618 ( 0.00%) 176.09
other 188124 ( 1.94%) 26177967 ( 1.05%) 139.15
frag 23 ( 0.00%) 4236 ( 0.00%) 184.17
tcpdump file: 200412171400.dump.gz (244.58 MB)