Traffic Trace Info
DumpFile: 200501221400.dump
FileSize: 313.73MB
Id: 200501221400
StartTime: Sat Jan 22 14:00:00 2005
EndTime: Sat Jan 22 14:15:00 2005
TotalTime: 899.38 seconds
TotalCapSize: 243.94MB CapLen: 96 bytes
# of packets: 4573207 (1920.63MB)
AvgRate: 17.91Mbps stddev:2.01M
IP flow (unique src/dst pair) Information
# of flows: 256385 (avg. 17.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.1% 3.7% 1.8% 1.0% 1.0% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 180095
Top 10 bandwidth usage (bytes/total in %):
22.6% 13.3% 13.3% 4.9% 4.0% 3.7% 2.4% 1.9% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501221400.pktlen.png)
detailed numbers
[ 16- 31]: 18848
[ 32- 63]: 1567360
[ 64- 127]: 1306067
[ 128- 255]: 295803
[ 256- 511]: 144827
[ 512- 1023]: 160388
[ 1024- 2047]: 1079914
Protocol Breakdown
![[protocol breakdown chart]](200501221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4573207 (100.00%) 2013923670 (100.00%) 440.37
ip 4528660 ( 99.03%) 2012544871 ( 99.93%) 444.40
tcp 3691353 ( 80.72%) 1843750178 ( 91.55%) 499.48
http(s) 703570 ( 15.38%) 799520953 ( 39.70%) 1136.38
http(c) 1447069 ( 31.64%) 165103462 ( 8.20%) 114.10
squid 5307 ( 0.12%) 709172 ( 0.04%) 133.63
smtp 109235 ( 2.39%) 26288402 ( 1.31%) 240.66
nntp 145 ( 0.00%) 12013 ( 0.00%) 82.85
ftp 11776 ( 0.26%) 897744 ( 0.04%) 76.24
pop3 2721 ( 0.06%) 462424 ( 0.02%) 169.95
imap 6207 ( 0.14%) 658597 ( 0.03%) 106.11
telnet 582 ( 0.01%) 69830 ( 0.00%) 119.98
ssh 18463 ( 0.40%) 2424036 ( 0.12%) 131.29
dns 611 ( 0.01%) 41658 ( 0.00%) 68.18
bgp 302 ( 0.01%) 136026 ( 0.01%) 450.42
napster 6 ( 0.00%) 360 ( 0.00%) 60.00
rtsp 95274 ( 2.08%) 47324539 ( 2.35%) 496.72
icecast 26260 ( 0.57%) 17928292 ( 0.89%) 682.72
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 1248269 ( 27.30%) 781610470 ( 38.81%) 626.16
udp 603766 ( 13.20%) 140339544 ( 6.97%) 232.44
dns 288650 ( 6.31%) 68648059 ( 3.41%) 237.82
realaud 7130 ( 0.16%) 1689396 ( 0.08%) 236.94
everque 1 ( 0.00%) 81 ( 0.00%) 81.00
quake 16007 ( 0.35%) 1052654 ( 0.05%) 65.76
other 288550 ( 6.31%) 68352095 ( 3.39%) 236.88
icmp 99680 ( 2.18%) 8268154 ( 0.41%) 82.95
ipsec 183 ( 0.00%) 18162 ( 0.00%) 99.25
ip6 550 ( 0.01%) 81341 ( 0.00%) 147.89
other 133128 ( 2.91%) 20087492 ( 1.00%) 150.89
frag 9119 ( 0.20%) 11662116 ( 0.58%) 1278.88
tcpdump file: 200501221400.dump.gz (120.96 MB)