Traffic Trace Info
DumpFile: 200412281400.dump
FileSize: 330.92MB
Id: 200412281400
StartTime: Tue Dec 28 14:00:00 2004
EndTime: Tue Dec 28 14:15:00 2004
TotalTime: 900.69 seconds
TotalCapSize: 258.81MB CapLen: 96 bytes
# of packets: 4725817 (1896.07MB)
AvgRate: 17.66Mbps stddev:3.09M
IP flow (unique src/dst pair) Information
# of flows: 289004 (avg. 16.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 4.8% 4.2% 3.9% 2.2% 2.0% 1.9% 1.7% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 198134
Top 10 bandwidth usage (bytes/total in %):
18.7% 13.3% 6.0% 5.9% 5.3% 4.9% 4.3% 4.3% 4.0% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200412281400.pktlen.png)
detailed numbers
[ 16- 31]: 20168
[ 32- 63]: 1719391
[ 64- 127]: 1347958
[ 128- 255]: 223658
[ 256- 511]: 209710
[ 512- 1023]: 150673
[ 1024- 2047]: 1054259
Protocol Breakdown
![[protocol breakdown chart]](200412281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4725817 (100.00%) 1988177966 (100.00%) 420.71
ip 4677692 ( 98.98%) 1986687461 ( 99.93%) 424.72
tcp 3994850 ( 84.53%) 1837565351 ( 92.42%) 459.98
http(s) 602542 ( 12.75%) 733217153 ( 36.88%) 1216.87
http(c) 1540555 ( 32.60%) 153148521 ( 7.70%) 99.41
squid 9354 ( 0.20%) 7988278 ( 0.40%) 854.00
smtp 148364 ( 3.14%) 47351699 ( 2.38%) 319.16
nntp 1796 ( 0.04%) 606665 ( 0.03%) 337.79
ftp 114837 ( 2.43%) 92185582 ( 4.64%) 802.75
pop3 3058 ( 0.06%) 745929 ( 0.04%) 243.93
imap 936 ( 0.02%) 73909 ( 0.00%) 78.96
telnet 107 ( 0.00%) 10994 ( 0.00%) 102.75
ssh 3516 ( 0.07%) 642684 ( 0.03%) 182.79
dns 593 ( 0.01%) 46557 ( 0.00%) 78.51
bgp 239 ( 0.01%) 124848 ( 0.01%) 522.38
napster 1261 ( 0.03%) 135737 ( 0.01%) 107.64
realaud 7388 ( 0.16%) 488529 ( 0.02%) 66.12
rtsp 44295 ( 0.94%) 15141804 ( 0.76%) 341.84
icecast 629 ( 0.01%) 90095 ( 0.00%) 143.24
other 1500007 ( 31.74%) 785042314 ( 39.49%) 523.36
udp 569446 ( 12.05%) 137225767 ( 6.90%) 240.98
dns 373362 ( 7.90%) 95126176 ( 4.78%) 254.78
realaud 7255 ( 0.15%) 2144400 ( 0.11%) 295.58
cuseeme 2 ( 0.00%) 242 ( 0.00%) 121.00
other 185186 ( 3.92%) 39830984 ( 2.00%) 215.09
icmp 90369 ( 1.91%) 10341799 ( 0.52%) 114.44
ipip 454 ( 0.01%) 48771 ( 0.00%) 107.43
ipsec 21545 ( 0.46%) 1365662 ( 0.07%) 63.39
ip6 715 ( 0.02%) 102189 ( 0.01%) 142.92
other 313 ( 0.01%) 37922 ( 0.00%) 121.16
frag 90 ( 0.00%) 93441 ( 0.00%) 1038.23
tcpdump file: 200412281400.dump.gz (127.20 MB)