Traffic Trace Info
DumpFile: 200412271345.dump
FileSize: 1564.14MB
Id: 200412271345
StartTime: Mon Dec 27 13:45:00 2004
EndTime: Mon Dec 27 14:00:01 2004
TotalTime: 900.83 seconds
TotalCapSize: 1148.87MB CapLen: 96 bytes
# of packets: 27214927 (2681.00MB)
AvgRate: 24.97Mbps stddev:1.39M
IP flow (unique src/dst pair) Information
# of flows: 624502 (avg. 43.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
48.1% 6.7% 3.6% 1.5% 1.1% 1.1% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 362012
Top 10 bandwidth usage (bytes/total in %):
48.3% 48.3% 7.1% 6.9% 6.8% 3.6% 3.6% 3.6% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412271345.pktlen.png)
detailed numbers
[ 16- 31]: 98895
[ 32- 63]: 24903927
[ 64- 127]: 1018041
[ 128- 255]: 118301
[ 256- 511]: 231859
[ 512- 1023]: 130265
[ 1024- 2047]: 713639
Protocol Breakdown
![[protocol breakdown chart]](200412271345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27214927 (100.00%) 2811237372 (100.00%) 103.30
ip 26896461 ( 98.83%) 2801204813 ( 99.64%) 104.15
tcp 3507730 ( 12.89%) 1289710066 ( 45.88%) 367.68
http(s) 392379 ( 1.44%) 412171029 ( 14.66%) 1050.44
http(c) 906007 ( 3.33%) 105838159 ( 3.76%) 116.82
squid 11771 ( 0.04%) 8636807 ( 0.31%) 733.74
smtp 92874 ( 0.34%) 26207019 ( 0.93%) 282.18
nntp 37 ( 0.00%) 2668 ( 0.00%) 72.11
ftp 16846 ( 0.06%) 1159573 ( 0.04%) 68.83
pop3 17476 ( 0.06%) 1166204 ( 0.04%) 66.73
imap 907 ( 0.00%) 76550 ( 0.00%) 84.40
telnet 247 ( 0.00%) 25037 ( 0.00%) 101.36
ssh 15578 ( 0.06%) 4152166 ( 0.15%) 266.54
dns 593 ( 0.00%) 41661 ( 0.00%) 70.25
bgp 245 ( 0.00%) 133346 ( 0.00%) 544.27
napster 405 ( 0.00%) 35501 ( 0.00%) 87.66
realaud 6802 ( 0.02%) 2584946 ( 0.09%) 380.03
rtsp 24996 ( 0.09%) 10827346 ( 0.39%) 433.16
icecast 15200 ( 0.06%) 946497 ( 0.03%) 62.27
other 1997505 ( 7.34%) 715437181 ( 25.45%) 358.17
udp 23222428 ( 85.33%) 1496045038 ( 53.22%) 64.42
dns 316490 ( 1.16%) 91796901 ( 3.27%) 290.05
realaud 17666 ( 0.06%) 6421093 ( 0.23%) 363.47
everque 16 ( 0.00%) 1969 ( 0.00%) 123.06
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 22728108 ( 83.51%) 1392369383 ( 49.53%) 61.26
icmp 165318 ( 0.61%) 15314560 ( 0.54%) 92.64
ipsec 162 ( 0.00%) 15956 ( 0.00%) 98.49
ip6 352 ( 0.00%) 60055 ( 0.00%) 170.61
other 471 ( 0.00%) 59138 ( 0.00%) 125.56
frag 25 ( 0.00%) 8938 ( 0.00%) 357.52
tcpdump file: 200412271345.dump.gz (317.22 MB)