Traffic Trace Info
DumpFile: 200501251400.dump
FileSize: 443.43MB
Id: 200501251400
StartTime: Tue Jan 25 14:00:00 2005
EndTime: Tue Jan 25 14:15:00 2005
TotalTime: 899.85 seconds
TotalCapSize: 345.94MB CapLen: 96 bytes
# of packets: 6389016 (2664.44MB)
AvgRate: 24.84Mbps stddev:1.67M
IP flow (unique src/dst pair) Information
# of flows: 306943 (avg. 20.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 1.8% 1.6% 1.5% 0.9% 0.9% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 191611
Top 10 bandwidth usage (bytes/total in %):
14.5% 8.1% 7.7% 3.7% 3.3% 3.2% 2.3% 2.2% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501251400.pktlen.png)
detailed numbers
[ 16- 31]: 38919
[ 32- 63]: 2109900
[ 64- 127]: 1879909
[ 128- 255]: 367170
[ 256- 511]: 200303
[ 512- 1023]: 326540
[ 1024- 2047]: 1466275
Protocol Breakdown
![[protocol breakdown chart]](200501251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6389016 (100.00%) 2793864405 (100.00%) 437.29
ip 6295915 ( 98.54%) 2790980990 ( 99.90%) 443.30
tcp 5310794 ( 83.12%) 2572575374 ( 92.08%) 484.41
http(s) 983731 ( 15.40%) 1123638800 ( 40.22%) 1142.22
http(c) 2254791 ( 35.29%) 294672045 ( 10.55%) 130.69
squid 10608 ( 0.17%) 4317597 ( 0.15%) 407.01
smtp 179875 ( 2.82%) 68187146 ( 2.44%) 379.08
nntp 399 ( 0.01%) 41581 ( 0.00%) 104.21
ftp 40113 ( 0.63%) 5925499 ( 0.21%) 147.72
pop3 6890 ( 0.11%) 2878404 ( 0.10%) 417.77
imap 1745 ( 0.03%) 140373 ( 0.01%) 80.44
telnet 3021 ( 0.05%) 371449 ( 0.01%) 122.96
ssh 1439 ( 0.02%) 208674 ( 0.01%) 145.01
dns 1111 ( 0.02%) 87850 ( 0.00%) 79.07
bgp 186 ( 0.00%) 78280 ( 0.00%) 420.86
napster 1844 ( 0.03%) 241891 ( 0.01%) 131.18
realaud 2767 ( 0.04%) 171858 ( 0.01%) 62.11
rtsp 40524 ( 0.63%) 22981881 ( 0.82%) 567.12
icecast 35823 ( 0.56%) 28318638 ( 1.01%) 790.52
other 1712374 ( 26.80%) 1019170345 ( 36.48%) 595.18
udp 762521 ( 11.93%) 193044957 ( 6.91%) 253.17
dns 418264 ( 6.55%) 121675699 ( 4.36%) 290.91
realaud 9409 ( 0.15%) 5496994 ( 0.20%) 584.23
halflif 2 ( 0.00%) 245 ( 0.00%) 122.50
starcra 17482 ( 0.27%) 1159483 ( 0.04%) 66.32
everque 2 ( 0.00%) 153 ( 0.00%) 76.50
quake 8 ( 0.00%) 919 ( 0.00%) 114.88
other 310543 ( 4.86%) 62600524 ( 2.24%) 201.58
icmp 96749 ( 1.51%) 8067410 ( 0.29%) 83.38
ipsec 179 ( 0.00%) 17786 ( 0.00%) 99.36
ip6 700 ( 0.01%) 99627 ( 0.00%) 142.32
other 124972 ( 1.96%) 17175836 ( 0.61%) 137.44
frag 10767 ( 0.17%) 15449567 ( 0.55%) 1434.90
tcpdump file: 200501251400.dump.gz (176.15 MB)