Traffic Trace Info
DumpFile: 200412201400.dump
FileSize: 706.08MB
Id: 200412201400
StartTime: Mon Dec 20 14:00:01 2004
EndTime: Mon Dec 20 14:15:00 2004
TotalTime: 899.21 seconds
TotalCapSize: 553.29MB CapLen: 96 bytes
# of packets: 10013328 (2718.20MB)
AvgRate: 25.36Mbps stddev:2.38M
IP flow (unique src/dst pair) Information
# of flows: 1834831 (avg. 5.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 1.4% 1.2% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 683564
Top 10 bandwidth usage (bytes/total in %):
16.7% 5.7% 5.1% 4.4% 3.6% 2.7% 2.6% 2.4% 1.7% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412201400.pktlen.png)
detailed numbers
[ 16- 31]: 65669
[ 32- 63]: 5888298
[ 64- 127]: 1844932
[ 128- 255]: 300400
[ 256- 511]: 241523
[ 512- 1023]: 337378
[ 1024- 2047]: 1335128
Protocol Breakdown
![[protocol breakdown chart]](200412201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10013328 (100.00%) 2850236909 (100.00%) 284.64
ip 9871689 ( 98.59%) 2845883064 ( 99.85%) 288.29
tcp 8614532 ( 86.03%) 2600386303 ( 91.23%) 301.86
http(s) 1036719 ( 10.35%) 1109552263 ( 38.93%) 1070.25
http(c) 1691017 ( 16.89%) 201399145 ( 7.07%) 119.10
squid 6229 ( 0.06%) 3721691 ( 0.13%) 597.48
smtp 155112 ( 1.55%) 33184155 ( 1.16%) 213.94
nntp 267 ( 0.00%) 21918 ( 0.00%) 82.09
ftp 45458 ( 0.45%) 9862538 ( 0.35%) 216.96
pop3 3471 ( 0.03%) 300755 ( 0.01%) 86.65
imap 5214 ( 0.05%) 5241181 ( 0.18%) 1005.21
telnet 2336 ( 0.02%) 393496 ( 0.01%) 168.45
ssh 2333 ( 0.02%) 395419 ( 0.01%) 169.49
dns 395 ( 0.00%) 30198 ( 0.00%) 76.45
bgp 228 ( 0.00%) 102840 ( 0.00%) 451.05
napster 1510 ( 0.02%) 422759 ( 0.01%) 279.97
realaud 3045 ( 0.03%) 409319 ( 0.01%) 134.42
rtsp 39408 ( 0.39%) 24627337 ( 0.86%) 624.93
icecast 2197 ( 0.02%) 865504 ( 0.03%) 393.95
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 5578597 ( 55.71%) 1208459304 ( 42.40%) 216.62
udp 807390 ( 8.06%) 193118895 ( 6.78%) 239.19
dns 396412 ( 3.96%) 106590242 ( 3.74%) 268.89
realaud 6700 ( 0.07%) 2204985 ( 0.08%) 329.10
halflif 2 ( 0.00%) 120 ( 0.00%) 60.00
everque 61 ( 0.00%) 8788 ( 0.00%) 144.07
other 395966 ( 3.95%) 83998305 ( 2.95%) 212.14
icmp 280890 ( 2.81%) 23743739 ( 0.83%) 84.53
ipsec 183 ( 0.00%) 18394 ( 0.00%) 100.51
ip6 481 ( 0.00%) 80269 ( 0.00%) 166.88
other 168213 ( 1.68%) 28535464 ( 1.00%) 169.64
frag 2646 ( 0.03%) 2162120 ( 0.08%) 817.13
tcpdump file: 200412201400.dump.gz (260.65 MB)