Traffic Trace Info
DumpFile: 200412181400.dump
FileSize: 767.82MB
Id: 200412181400
StartTime: Sat Dec 18 14:00:00 2004
EndTime: Sat Dec 18 14:15:00 2004
TotalTime: 900.73 seconds
TotalCapSize: 604.60MB CapLen: 96 bytes
# of packets: 10696709 (2259.62MB)
AvgRate: 21.05Mbps stddev:3.99M
IP flow (unique src/dst pair) Information
# of flows: 2628952 (avg. 4.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.6% 3.2% 2.4% 1.7% 1.1% 1.0% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 736767
Top 10 bandwidth usage (bytes/total in %):
15.3% 7.9% 7.6% 5.6% 5.5% 4.9% 3.2% 3.2% 2.8% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412181400.pktlen.png)
detailed numbers
[ 16- 31]: 47623
[ 32- 63]: 7218664
[ 64- 127]: 1827480
[ 128- 255]: 168190
[ 256- 511]: 177784
[ 512- 1023]: 215092
[ 1024- 2047]: 1041876
Protocol Breakdown
![[protocol breakdown chart]](200412181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10696709 (100.00%) 2369386319 (100.00%) 221.51
ip 10596059 ( 99.06%) 2366297320 ( 99.87%) 223.32
tcp 9431994 ( 88.18%) 2166361871 ( 91.43%) 229.68
http(s) 828644 ( 7.75%) 960625213 ( 40.54%) 1159.27
http(c) 1148066 ( 10.73%) 109795011 ( 4.63%) 95.63
squid 3915 ( 0.04%) 987750 ( 0.04%) 252.30
smtp 255607 ( 2.39%) 46153874 ( 1.95%) 180.57
nntp 112 ( 0.00%) 9126 ( 0.00%) 81.48
ftp 18647 ( 0.17%) 13021689 ( 0.55%) 698.33
pop3 5695 ( 0.05%) 1152375 ( 0.05%) 202.35
imap 728 ( 0.01%) 120381 ( 0.01%) 165.36
telnet 737 ( 0.01%) 76135 ( 0.00%) 103.30
ssh 14374 ( 0.13%) 1832317 ( 0.08%) 127.47
dns 236 ( 0.00%) 32137 ( 0.00%) 136.17
bgp 224 ( 0.00%) 103632 ( 0.00%) 462.64
napster 8552 ( 0.08%) 3349879 ( 0.14%) 391.71
rtsp 8262 ( 0.08%) 4434116 ( 0.19%) 536.69
icecast 8872 ( 0.08%) 4239322 ( 0.18%) 477.83
other 7103010 ( 66.40%) 1019531748 ( 43.03%) 143.54
udp 620635 ( 5.80%) 140092604 ( 5.91%) 225.72
dns 349381 ( 3.27%) 87007635 ( 3.67%) 249.03
realaud 8590 ( 0.08%) 3769735 ( 0.16%) 438.85
halflif 1 ( 0.00%) 73 ( 0.00%) 73.00
everque 29 ( 0.00%) 2043 ( 0.00%) 70.45
other 256713 ( 2.40%) 49111522 ( 2.07%) 191.31
icmp 375408 ( 3.51%) 32487828 ( 1.37%) 86.54
ipsec 184 ( 0.00%) 18428 ( 0.00%) 100.15
ip6 382 ( 0.00%) 65775 ( 0.00%) 172.19
other 167456 ( 1.57%) 27270814 ( 1.15%) 162.85
frag 39 ( 0.00%) 2340 ( 0.00%) 60.00
tcpdump file: 200412181400.dump.gz (264.36 MB)