Traffic Trace Info
DumpFile: 200501161400.dump
FileSize: 239.45MB
Id: 200501161400
StartTime: Sun Jan 16 14:00:00 2005
EndTime: Sun Jan 16 14:15:00 2005
TotalTime: 899.49 seconds
TotalCapSize: 186.57MB CapLen: 96 bytes
# of packets: 3465492 (1444.19MB)
AvgRate: 13.47Mbps stddev:1.31M
IP flow (unique src/dst pair) Information
# of flows: 357982 (avg. 9.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.8% 2.5% 2.4% 2.2% 1.4% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 270871
Top 10 bandwidth usage (bytes/total in %):
31.9% 7.7% 4.5% 4.3% 3.4% 2.9% 2.8% 2.8% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501161400.pktlen.png)
detailed numbers
[ 16- 31]: 10494
[ 32- 63]: 1167904
[ 64- 127]: 1049351
[ 128- 255]: 159085
[ 256- 511]: 142290
[ 512- 1023]: 127197
[ 1024- 2047]: 809171
Protocol Breakdown
![[protocol breakdown chart]](200501161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3465492 (100.00%) 1514344418 (100.00%) 436.98
ip 3440869 ( 99.29%) 1513582584 ( 99.95%) 439.88
tcp 2670327 ( 77.05%) 1338642316 ( 88.40%) 501.30
http(s) 366050 ( 10.56%) 384113334 ( 25.36%) 1049.35
http(c) 744613 ( 21.49%) 78850896 ( 5.21%) 105.90
squid 8730 ( 0.25%) 3347778 ( 0.22%) 383.48
smtp 132120 ( 3.81%) 37468776 ( 2.47%) 283.60
ftp 5812 ( 0.17%) 386583 ( 0.03%) 66.51
pop3 1660 ( 0.05%) 644384 ( 0.04%) 388.18
imap 10503 ( 0.30%) 2721546 ( 0.18%) 259.12
telnet 50 ( 0.00%) 5706 ( 0.00%) 114.12
ssh 2326 ( 0.07%) 323775 ( 0.02%) 139.20
dns 525 ( 0.02%) 36472 ( 0.00%) 69.47
bgp 234 ( 0.01%) 120754 ( 0.01%) 516.04
napster 1141 ( 0.03%) 122298 ( 0.01%) 107.18
realaud 204 ( 0.01%) 14880 ( 0.00%) 72.94
rtsp 23795 ( 0.69%) 20321181 ( 1.34%) 854.01
icecast 8782 ( 0.25%) 548591 ( 0.04%) 62.47
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1356479 ( 39.14%) 809366227 ( 53.45%) 596.67
udp 511834 ( 14.77%) 147406890 ( 9.73%) 288.00
dns 305842 ( 8.83%) 72509628 ( 4.79%) 237.08
realaud 2062 ( 0.06%) 166598 ( 0.01%) 80.79
halflif 52 ( 0.00%) 4728 ( 0.00%) 90.92
starcra 1 ( 0.00%) 76 ( 0.00%) 76.00
everque 14 ( 0.00%) 1769 ( 0.00%) 126.36
quake 5911 ( 0.17%) 852341 ( 0.06%) 144.20
other 195670 ( 5.65%) 73792073 ( 4.87%) 377.13
icmp 133594 ( 3.85%) 10704696 ( 0.71%) 80.13
ipsec 185 ( 0.01%) 18446 ( 0.00%) 99.71
ip6 590 ( 0.02%) 87714 ( 0.01%) 148.67
other 124339 ( 3.59%) 16722522 ( 1.10%) 134.49
frag 62 ( 0.00%) 53497 ( 0.00%) 862.85
tcpdump file: 200501161400.dump.gz (92.11 MB)