Traffic Trace Info
DumpFile: 200501271400.dump
FileSize: 454.46MB
Id: 200501271400
StartTime: Thu Jan 27 14:00:01 2005
EndTime: Thu Jan 27 14:15:00 2005
TotalTime: 899.47 seconds
TotalCapSize: 353.99MB CapLen: 96 bytes
# of packets: 6584936 (2751.08MB)
AvgRate: 25.66Mbps stddev:1.42M
IP flow (unique src/dst pair) Information
# of flows: 353882 (avg. 18.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.0% 1.9% 1.7% 1.5% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 238475
Top 10 bandwidth usage (bytes/total in %):
8.5% 7.8% 4.1% 4.0% 3.8% 3.7% 3.0% 2.5% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501271400.pktlen.png)
detailed numbers
[ 16- 31]: 42148
[ 32- 63]: 2132636
[ 64- 127]: 2001014
[ 128- 255]: 287596
[ 256- 511]: 242383
[ 512- 1023]: 367995
[ 1024- 2047]: 1511164
Protocol Breakdown
![[protocol breakdown chart]](200501271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6584936 (100.00%) 2884717063 (100.00%) 438.08
ip 6486077 ( 98.50%) 2881659038 ( 99.89%) 444.28
tcp 5410154 ( 82.16%) 2570336549 ( 89.10%) 475.09
http(s) 908088 ( 13.79%) 958048152 ( 33.21%) 1055.02
http(c) 2176135 ( 33.05%) 282046497 ( 9.78%) 129.61
squid 14678 ( 0.22%) 8062003 ( 0.28%) 549.26
smtp 200782 ( 3.05%) 63549827 ( 2.20%) 316.51
nntp 168 ( 0.00%) 18968 ( 0.00%) 112.90
ftp 64396 ( 0.98%) 69776294 ( 2.42%) 1083.55
pop3 6762 ( 0.10%) 2184676 ( 0.08%) 323.08
imap 23049 ( 0.35%) 2299342 ( 0.08%) 99.76
telnet 2025 ( 0.03%) 221944 ( 0.01%) 109.60
ssh 3458 ( 0.05%) 317992 ( 0.01%) 91.96
dns 963 ( 0.01%) 81490 ( 0.00%) 84.62
bgp 462 ( 0.01%) 232974 ( 0.01%) 504.27
napster 1912 ( 0.03%) 186275 ( 0.01%) 97.42
realaud 135 ( 0.00%) 15260 ( 0.00%) 113.04
rtsp 40064 ( 0.61%) 29346953 ( 1.02%) 732.50
icecast 9540 ( 0.14%) 626176 ( 0.02%) 65.64
other 1922170 ( 29.19%) 1152116689 ( 39.94%) 599.38
udp 737130 ( 11.19%) 256567491 ( 8.89%) 348.06
dns 463689 ( 7.04%) 137010371 ( 4.75%) 295.48
realaud 16888 ( 0.26%) 14070535 ( 0.49%) 833.17
halflif 1 ( 0.00%) 86 ( 0.00%) 86.00
starcra 4497 ( 0.07%) 292958 ( 0.01%) 65.15
everque 104 ( 0.00%) 14978 ( 0.00%) 144.02
quake 6 ( 0.00%) 416 ( 0.00%) 69.33
cuseeme 4 ( 0.00%) 336 ( 0.00%) 84.00
other 245535 ( 3.73%) 103087792 ( 3.57%) 419.85
icmp 98233 ( 1.49%) 8402553 ( 0.29%) 85.54
ipsec 223 ( 0.00%) 29350 ( 0.00%) 131.61
ip6 660 ( 0.01%) 99421 ( 0.00%) 150.64
other 239677 ( 3.64%) 46223674 ( 1.60%) 192.86
frag 20213 ( 0.31%) 29383035 ( 1.02%) 1453.67
tcpdump file: 200501271400.dump.gz (185.22 MB)