Traffic Trace Info
DumpFile: 200501011400.dump
FileSize: 213.66MB
Id: 200501011400
StartTime: Sat Jan 1 14:00:00 2005
EndTime: Sat Jan 1 14:15:00 2005
TotalTime: 899.82 seconds
TotalCapSize: 166.31MB CapLen: 96 bytes
# of packets: 3103414 (1490.21MB)
AvgRate: 13.89Mbps stddev:1.10M
IP flow (unique src/dst pair) Information
# of flows: 279098 (avg. 11.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 2.9% 2.8% 2.1% 1.3% 1.3% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 190536
Top 10 bandwidth usage (bytes/total in %):
29.7% 13.2% 9.1% 7.8% 4.9% 4.5% 3.4% 3.1% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501011400.pktlen.png)
detailed numbers
[ 16- 31]: 8285
[ 32- 63]: 948296
[ 64- 127]: 835986
[ 128- 255]: 165792
[ 256- 511]: 158287
[ 512- 1023]: 137072
[ 1024- 2047]: 849696
Protocol Breakdown
![[protocol breakdown chart]](200501011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3103414 (100.00%) 1562599468 (100.00%) 503.51
ip 3084170 ( 99.38%) 1562004359 ( 99.96%) 506.46
tcp 2416457 ( 77.86%) 1418025786 ( 90.75%) 586.82
http(s) 372351 ( 12.00%) 450462659 ( 28.83%) 1209.78
http(c) 541417 ( 17.45%) 56473038 ( 3.61%) 104.31
squid 1304 ( 0.04%) 520846 ( 0.03%) 399.42
smtp 98031 ( 3.16%) 28470335 ( 1.82%) 290.42
nntp 8 ( 0.00%) 1481 ( 0.00%) 185.12
ftp 10247 ( 0.33%) 870295 ( 0.06%) 84.93
pop3 12804 ( 0.41%) 1103808 ( 0.07%) 86.21
imap 140 ( 0.00%) 10577 ( 0.00%) 75.55
telnet 4152 ( 0.13%) 249397 ( 0.02%) 60.07
ssh 225 ( 0.01%) 19607 ( 0.00%) 87.14
dns 461 ( 0.01%) 37189 ( 0.00%) 80.67
bgp 224 ( 0.01%) 110470 ( 0.01%) 493.17
napster 767 ( 0.02%) 75567 ( 0.00%) 98.52
realaud 1432 ( 0.05%) 97986 ( 0.01%) 68.43
rtsp 9121 ( 0.29%) 6577276 ( 0.42%) 721.11
icecast 79 ( 0.00%) 13391 ( 0.00%) 169.51
other 1358031 ( 43.76%) 872738422 ( 55.85%) 642.65
udp 432637 ( 13.94%) 118989999 ( 7.61%) 275.03
dns 257780 ( 8.31%) 64336171 ( 4.12%) 249.58
realaud 35916 ( 1.16%) 21439890 ( 1.37%) 596.95
quake 1 ( 0.00%) 60 ( 0.00%) 60.00
other 137491 ( 4.43%) 33164539 ( 2.12%) 241.21
icmp 110398 ( 3.56%) 8844739 ( 0.57%) 80.12
ipsec 188 ( 0.01%) 18316 ( 0.00%) 97.43
ip6 423 ( 0.01%) 71881 ( 0.00%) 169.93
other 124067 ( 4.00%) 16053638 ( 1.03%) 129.39
frag 20 ( 0.00%) 1200 ( 0.00%) 60.00
tcpdump file: 200501011400.dump.gz (82.17 MB)