Traffic Trace Info
DumpFile: 200412191400.dump
FileSize: 666.17MB
Id: 200412191400
StartTime: Sun Dec 19 14:00:00 2004
EndTime: Sun Dec 19 14:15:01 2004
TotalTime: 900.25 seconds
TotalCapSize: 526.44MB CapLen: 96 bytes
# of packets: 9157336 (1629.93MB)
AvgRate: 15.19Mbps stddev:4.68M
IP flow (unique src/dst pair) Information
# of flows: 2396327 (avg. 3.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.7% 1.6% 1.4% 1.3% 1.2% 1.1% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 583284
Top 10 bandwidth usage (bytes/total in %):
13.0% 10.1% 8.3% 5.4% 4.1% 2.6% 2.4% 1.9% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412191400.pktlen.png)
detailed numbers
[ 16- 31]: 25464
[ 32- 63]: 6998258
[ 64- 127]: 973059
[ 128- 255]: 114308
[ 256- 511]: 178418
[ 512- 1023]: 200058
[ 1024- 2047]: 667771
Protocol Breakdown
![[protocol breakdown chart]](200412191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9157336 (100.00%) 1709107054 (100.00%) 186.64
ip 9103478 ( 99.41%) 1707453877 ( 99.90%) 187.56
tcp 8295956 ( 90.59%) 1511289357 ( 88.43%) 182.17
http(s) 490571 ( 5.36%) 543354103 ( 31.79%) 1107.60
http(c) 596626 ( 6.52%) 55582355 ( 3.25%) 93.16
squid 2497 ( 0.03%) 188128 ( 0.01%) 75.34
smtp 116116 ( 1.27%) 25429111 ( 1.49%) 219.00
nntp 216 ( 0.00%) 24786 ( 0.00%) 114.75
ftp 15159 ( 0.17%) 6577964 ( 0.38%) 433.93
pop3 3907 ( 0.04%) 1677560 ( 0.10%) 429.37
imap 1195 ( 0.01%) 112060 ( 0.01%) 93.77
telnet 308 ( 0.00%) 22952 ( 0.00%) 74.52
ssh 3042 ( 0.03%) 1443912 ( 0.08%) 474.66
dns 314 ( 0.00%) 21397 ( 0.00%) 68.14
bgp 239 ( 0.00%) 116568 ( 0.01%) 487.73
napster 9560 ( 0.10%) 4748527 ( 0.28%) 496.71
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 16888 ( 0.18%) 13692558 ( 0.80%) 810.79
icecast 7785 ( 0.09%) 473432 ( 0.03%) 60.81
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 7018076 ( 76.64%) 857365109 ( 50.16%) 122.17
udp 570364 ( 6.23%) 176507404 ( 10.33%) 309.46
dns 350413 ( 3.83%) 110134249 ( 6.44%) 314.30
realaud 2696 ( 0.03%) 1314458 ( 0.08%) 487.56
halflif 878 ( 0.01%) 154536 ( 0.01%) 176.01
quake 1 ( 0.00%) 75 ( 0.00%) 75.00
other 212539 ( 2.32%) 64768107 ( 3.79%) 304.74
icmp 217969 ( 2.38%) 16462696 ( 0.96%) 75.53
ipsec 1827 ( 0.02%) 324586 ( 0.02%) 177.66
ip6 390 ( 0.00%) 68995 ( 0.00%) 176.91
other 16972 ( 0.19%) 2800839 ( 0.16%) 165.03
frag 48 ( 0.00%) 32938 ( 0.00%) 686.21
tcpdump file: 200412191400.dump.gz (223.70 MB)