Traffic Trace Info
DumpFile: 200501301400.dump
FileSize: 295.06MB
Id: 200501301400
StartTime: Sun Jan 30 14:00:00 2005
EndTime: Sun Jan 30 14:15:00 2005
TotalTime: 899.93 seconds
TotalCapSize: 229.78MB CapLen: 96 bytes
# of packets: 4278356 (2032.44MB)
AvgRate: 18.95Mbps stddev:1.74M
IP flow (unique src/dst pair) Information
# of flows: 337863 (avg. 12.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.3% 3.1% 2.4% 2.4% 1.5% 1.2% 1.2% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 248050
Top 10 bandwidth usage (bytes/total in %):
19.8% 14.6% 13.4% 11.3% 4.4% 3.1% 3.0% 2.6% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501301400.pktlen.png)
detailed numbers
[ 16- 31]: 16993
[ 32- 63]: 1298680
[ 64- 127]: 1310800
[ 128- 255]: 143575
[ 256- 511]: 134338
[ 512- 1023]: 178467
[ 1024- 2047]: 1195503
Protocol Breakdown
![[protocol breakdown chart]](200501301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4278356 (100.00%) 2131167338 (100.00%) 498.13
ip 4238567 ( 99.07%) 2129936428 ( 99.94%) 502.51
tcp 3449949 ( 80.64%) 1965179419 ( 92.21%) 569.63
http(s) 870117 ( 20.34%) 934817520 ( 43.86%) 1074.36
http(c) 1206873 ( 28.21%) 120513543 ( 5.65%) 99.86
squid 8509 ( 0.20%) 3608536 ( 0.17%) 424.08
smtp 99506 ( 2.33%) 31121991 ( 1.46%) 312.76
nntp 17 ( 0.00%) 1020 ( 0.00%) 60.00
ftp 24363 ( 0.57%) 1768320 ( 0.08%) 72.58
pop3 1860 ( 0.04%) 276843 ( 0.01%) 148.84
imap 16269 ( 0.38%) 1519903 ( 0.07%) 93.42
telnet 65 ( 0.00%) 5814 ( 0.00%) 89.45
ssh 3459 ( 0.08%) 469683 ( 0.02%) 135.79
dns 599 ( 0.01%) 40160 ( 0.00%) 67.05
bgp 315 ( 0.01%) 163292 ( 0.01%) 518.39
napster 2036 ( 0.05%) 230619 ( 0.01%) 113.27
realaud 1316 ( 0.03%) 89271 ( 0.00%) 67.84
rtsp 11708 ( 0.27%) 10424340 ( 0.49%) 890.36
icecast 8544 ( 0.20%) 567789 ( 0.03%) 66.45
other 1182258 ( 27.63%) 859147126 ( 40.31%) 726.70
udp 549915 ( 12.85%) 138818599 ( 6.51%) 252.44
dns 290957 ( 6.80%) 63807886 ( 2.99%) 219.30
realaud 12863 ( 0.30%) 6165300 ( 0.29%) 479.30
everque 2 ( 0.00%) 139 ( 0.00%) 69.50
other 240792 ( 5.63%) 66524159 ( 3.12%) 276.27
icmp 128539 ( 3.00%) 10452557 ( 0.49%) 81.32
ipsec 183 ( 0.00%) 18162 ( 0.00%) 99.25
ip6 395 ( 0.01%) 73887 ( 0.00%) 187.06
other 109586 ( 2.56%) 15393804 ( 0.72%) 140.47
frag 15192 ( 0.36%) 21031005 ( 0.99%) 1384.35
tcpdump file: 200501301400.dump.gz (114.94 MB)