Traffic Trace Info
DumpFile: 200412261400.dump
FileSize: 628.49MB
Id: 200412261400
StartTime: Sun Dec 26 14:00:00 2004
EndTime: Sun Dec 26 14:15:00 2004
TotalTime: 899.96 seconds
TotalCapSize: 495.98MB CapLen: 96 bytes
# of packets: 8684094 (1776.19MB)
AvgRate: 16.56Mbps stddev:3.94M
IP flow (unique src/dst pair) Information
# of flows: 2145838 (avg. 4.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.9% 1.8% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 579460
Top 10 bandwidth usage (bytes/total in %):
27.4% 6.4% 4.3% 3.3% 2.1% 2.1% 1.9% 1.9% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412261400.pktlen.png)
detailed numbers
[ 16- 31]: 28951
[ 32- 63]: 6141992
[ 64- 127]: 1193998
[ 128- 255]: 203014
[ 256- 511]: 189721
[ 512- 1023]: 107901
[ 1024- 2047]: 818517
Protocol Breakdown
![[protocol breakdown chart]](200412261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8684094 (100.00%) 1862469048 (100.00%) 214.47
ip 8624372 ( 99.31%) 1860639325 ( 99.90%) 215.74
tcp 7790188 ( 89.71%) 1681237377 ( 90.27%) 215.81
http(s) 411103 ( 4.73%) 454400002 ( 24.40%) 1105.32
http(c) 715876 ( 8.24%) 75179840 ( 4.04%) 105.02
squid 14287 ( 0.16%) 8037848 ( 0.43%) 562.60
smtp 116639 ( 1.34%) 25860578 ( 1.39%) 221.71
nntp 59 ( 0.00%) 5698 ( 0.00%) 96.58
ftp 41154 ( 0.47%) 17534189 ( 0.94%) 426.06
pop3 15817 ( 0.18%) 1033263 ( 0.06%) 65.33
imap 367 ( 0.00%) 27111 ( 0.00%) 73.87
telnet 371 ( 0.00%) 30788 ( 0.00%) 82.99
ssh 2870 ( 0.03%) 2983580 ( 0.16%) 1039.57
dns 581 ( 0.01%) 40353 ( 0.00%) 69.45
bgp 245 ( 0.00%) 122192 ( 0.01%) 498.74
napster 919 ( 0.01%) 93271 ( 0.01%) 101.49
realaud 26 ( 0.00%) 4788 ( 0.00%) 184.15
rtsp 18380 ( 0.21%) 22615158 ( 1.21%) 1230.42
icecast 5191 ( 0.06%) 394887 ( 0.02%) 76.07
other 6431418 ( 74.06%) 1072366446 ( 57.58%) 166.74
udp 598016 ( 6.89%) 154772890 ( 8.31%) 258.81
dns 263962 ( 3.04%) 60015567 ( 3.22%) 227.36
realaud 2362 ( 0.03%) 142706 ( 0.01%) 60.42
everque 47 ( 0.00%) 7245 ( 0.00%) 154.15
other 327246 ( 3.77%) 94456293 ( 5.07%) 288.64
icmp 176282 ( 2.03%) 16267129 ( 0.87%) 92.28
ipsec 199 ( 0.00%) 20146 ( 0.00%) 101.24
ip6 390 ( 0.00%) 69950 ( 0.00%) 179.36
other 59297 ( 0.68%) 8271833 ( 0.44%) 139.50
frag 1892 ( 0.02%) 2681435 ( 0.14%) 1417.25
tcpdump file: 200412261400.dump.gz (219.67 MB)