Traffic Trace Info
DumpFile: 200412241400.dump
FileSize: 729.05MB
Id: 200412241400
StartTime: Fri Dec 24 14:00:00 2004
EndTime: Fri Dec 24 14:15:01 2004
TotalTime: 900.22 seconds
TotalCapSize: 574.31MB CapLen: 96 bytes
# of packets: 10141108 (2314.68MB)
AvgRate: 21.57Mbps stddev:3.08M
IP flow (unique src/dst pair) Information
# of flows: 1989679 (avg. 5.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 1.3% 1.2% 1.2% 1.0% 1.0% 0.9% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 595444
Top 10 bandwidth usage (bytes/total in %):
11.5% 9.7% 9.7% 4.9% 4.6% 3.0% 2.5% 2.0% 2.0% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412241400.pktlen.png)
detailed numbers
[ 16- 31]: 51387
[ 32- 63]: 6465278
[ 64- 127]: 1841795
[ 128- 255]: 208499
[ 256- 511]: 253568
[ 512- 1023]: 231816
[ 1024- 2047]: 1088765
Protocol Breakdown
![[protocol breakdown chart]](200412241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10141108 (100.00%) 2427113487 (100.00%) 239.33
ip 10029470 ( 98.90%) 2423679444 ( 99.86%) 241.66
tcp 9101288 ( 89.75%) 2234444811 ( 92.06%) 245.51
http(s) 697748 ( 6.88%) 746683323 ( 30.76%) 1070.13
http(c) 1568992 ( 15.47%) 188000614 ( 7.75%) 119.82
squid 4111 ( 0.04%) 434512 ( 0.02%) 105.69
smtp 177969 ( 1.75%) 74338148 ( 3.06%) 417.70
nntp 163 ( 0.00%) 16688 ( 0.00%) 102.38
ftp 40999 ( 0.40%) 14355079 ( 0.59%) 350.13
pop3 3025 ( 0.03%) 365932 ( 0.02%) 120.97
imap 1084 ( 0.01%) 87046 ( 0.00%) 80.30
telnet 991 ( 0.01%) 99602 ( 0.00%) 100.51
ssh 6753 ( 0.07%) 683427 ( 0.03%) 101.20
dns 744 ( 0.01%) 57567 ( 0.00%) 77.38
bgp 232 ( 0.00%) 114092 ( 0.00%) 491.78
napster 542 ( 0.01%) 64933 ( 0.00%) 119.80
realaud 2726 ( 0.03%) 2534056 ( 0.10%) 929.59
rtsp 19618 ( 0.19%) 13023668 ( 0.54%) 663.86
icecast 5977 ( 0.06%) 369934 ( 0.02%) 61.89
hotline 13 ( 0.00%) 1269 ( 0.00%) 97.62
other 6533655 ( 64.43%) 1191990023 ( 49.11%) 182.44
udp 632514 ( 6.24%) 158008824 ( 6.51%) 249.81
dns 369501 ( 3.64%) 90893743 ( 3.74%) 245.99
realaud 15830 ( 0.16%) 6468741 ( 0.27%) 408.64
halflif 1 ( 0.00%) 91 ( 0.00%) 91.00
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 4 ( 0.00%) 342 ( 0.00%) 85.50
other 240739 ( 2.37%) 60300468 ( 2.48%) 250.48
icmp 182237 ( 1.80%) 13835818 ( 0.57%) 75.92
ipsec 181 ( 0.00%) 17914 ( 0.00%) 98.97
ip6 423 ( 0.00%) 71524 ( 0.00%) 169.09
other 112827 ( 1.11%) 17300553 ( 0.71%) 153.34
frag 4625 ( 0.05%) 3790787 ( 0.16%) 819.63
tcpdump file: 200412241400.dump.gz (260.73 MB)