Traffic Trace Info
DumpFile: 200501041400.dump
FileSize: 355.57MB
Id: 200501041400
StartTime: Tue Jan 4 14:00:00 2005
EndTime: Tue Jan 4 14:15:00 2005
TotalTime: 899.90 seconds
TotalCapSize: 277.52MB CapLen: 96 bytes
# of packets: 5115338 (2065.96MB)
AvgRate: 19.26Mbps stddev:1.42M
IP flow (unique src/dst pair) Information
# of flows: 421027 (avg. 12.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.2% 2.1% 2.0% 1.8% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 292932
Top 10 bandwidth usage (bytes/total in %):
25.3% 6.1% 5.6% 4.9% 4.5% 3.6% 3.3% 2.6% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501041400.pktlen.png)
detailed numbers
[ 16- 31]: 23672
[ 32- 63]: 1572862
[ 64- 127]: 1714194
[ 128- 255]: 240467
[ 256- 511]: 196565
[ 512- 1023]: 254943
[ 1024- 2047]: 1112635
Protocol Breakdown
![[protocol breakdown chart]](200501041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5115338 (100.00%) 2166311174 (100.00%) 423.49
ip 5059217 ( 98.90%) 2164573729 ( 99.92%) 427.85
tcp 4119258 ( 80.53%) 1960180450 ( 90.48%) 475.86
http(s) 726156 ( 14.20%) 754729233 ( 34.84%) 1039.35
http(c) 1395282 ( 27.28%) 174264417 ( 8.04%) 124.90
squid 19295 ( 0.38%) 2282471 ( 0.11%) 118.29
smtp 178622 ( 3.49%) 62592134 ( 2.89%) 350.42
nntp 334 ( 0.01%) 35312 ( 0.00%) 105.72
ftp 13256 ( 0.26%) 1273074 ( 0.06%) 96.04
pop3 13781 ( 0.27%) 1862638 ( 0.09%) 135.16
imap 842 ( 0.02%) 111718 ( 0.01%) 132.68
telnet 1100 ( 0.02%) 110005 ( 0.01%) 100.00
ssh 229740 ( 4.49%) 23214391 ( 1.07%) 101.05
dns 581 ( 0.01%) 42755 ( 0.00%) 73.59
bgp 240 ( 0.00%) 120652 ( 0.01%) 502.72
napster 1173 ( 0.02%) 120166 ( 0.01%) 102.44
realaud 278 ( 0.01%) 54278 ( 0.00%) 195.24
rtsp 30148 ( 0.59%) 14738405 ( 0.68%) 488.87
icecast 5372 ( 0.11%) 332864 ( 0.02%) 61.96
hotline 3 ( 0.00%) 182 ( 0.00%) 60.67
other 1483171 ( 28.99%) 923618238 ( 42.64%) 622.73
udp 569768 ( 11.14%) 154027501 ( 7.11%) 270.33
dns 399269 ( 7.81%) 120569367 ( 5.57%) 301.98
realaud 4108 ( 0.08%) 1954014 ( 0.09%) 475.66
halflif 18 ( 0.00%) 1148 ( 0.00%) 63.78
everque 90 ( 0.00%) 12799 ( 0.00%) 142.21
cuseeme 1 ( 0.00%) 84 ( 0.00%) 84.00
other 163096 ( 3.19%) 31381549 ( 1.45%) 192.41
icmp 109010 ( 2.13%) 8878866 ( 0.41%) 81.45
ipsec 1627 ( 0.03%) 1444394 ( 0.07%) 887.77
ip6 503 ( 0.01%) 80574 ( 0.00%) 160.19
other 259051 ( 5.06%) 39961944 ( 1.84%) 154.26
frag 11 ( 0.00%) 660 ( 0.00%) 60.00
tcpdump file: 200501041400.dump.gz (141.67 MB)