Traffic Trace Info
DumpFile: 200502011400.dump
FileSize: 447.30MB
Id: 200502011400
StartTime: Tue Feb 1 14:00:01 2005
EndTime: Tue Feb 1 14:15:00 2005
TotalTime: 899.61 seconds
TotalCapSize: 348.92MB CapLen: 96 bytes
# of packets: 6447248 (2711.51MB)
AvgRate: 25.28Mbps stddev:1.44M
IP flow (unique src/dst pair) Information
# of flows: 355790 (avg. 18.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 4.5% 3.2% 2.7% 2.0% 1.7% 1.5% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 253632
Top 10 bandwidth usage (bytes/total in %):
10.9% 8.3% 7.8% 6.9% 5.4% 4.5% 4.5% 4.2% 3.9% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200502011400.pktlen.png)
detailed numbers
[ 16- 31]: 39152
[ 32- 63]: 2091261
[ 64- 127]: 1982042
[ 128- 255]: 181006
[ 256- 511]: 185027
[ 512- 1023]: 511281
[ 1024- 2047]: 1457479
Protocol Breakdown
![[protocol breakdown chart]](200502011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6447248 (100.00%) 2843225855 (100.00%) 441.00
ip 6351266 ( 98.51%) 2840248142 ( 99.90%) 447.19
tcp 5387660 ( 83.57%) 2566511025 ( 90.27%) 476.37
http(s) 1076528 ( 16.70%) 1012961486 ( 35.63%) 940.95
http(c) 2115998 ( 32.82%) 277029606 ( 9.74%) 130.92
squid 13869 ( 0.22%) 2708296 ( 0.10%) 195.28
smtp 159416 ( 2.47%) 60165956 ( 2.12%) 377.41
nntp 117 ( 0.00%) 9538 ( 0.00%) 81.52
ftp 115504 ( 1.79%) 131888383 ( 4.64%) 1141.85
pop3 5844 ( 0.09%) 1377763 ( 0.05%) 235.76
imap 1819 ( 0.03%) 141100 ( 0.00%) 77.57
telnet 2090 ( 0.03%) 172659 ( 0.01%) 82.61
ssh 1037 ( 0.02%) 340310 ( 0.01%) 328.17
dns 423 ( 0.01%) 28052 ( 0.00%) 66.32
bgp 381 ( 0.01%) 161514 ( 0.01%) 423.92
napster 1276 ( 0.02%) 132999 ( 0.00%) 104.23
realaud 1760 ( 0.03%) 108021 ( 0.00%) 61.38
rtsp 61284 ( 0.95%) 15704821 ( 0.55%) 256.26
icecast 28065 ( 0.44%) 2119670 ( 0.07%) 75.53
hotline 26 ( 0.00%) 2281 ( 0.00%) 87.73
other 1766775 ( 27.40%) 1060251058 ( 37.29%) 600.11
udp 573549 ( 8.90%) 224302756 ( 7.89%) 391.08
dns 416364 ( 6.46%) 134760629 ( 4.74%) 323.66
realaud 1329 ( 0.02%) 109644 ( 0.00%) 82.50
everque 63 ( 0.00%) 9173 ( 0.00%) 145.60
quake 4 ( 0.00%) 280 ( 0.00%) 70.00
other 149283 ( 2.32%) 89050103 ( 3.13%) 596.52
icmp 154165 ( 2.39%) 12011535 ( 0.42%) 77.91
ipsec 89 ( 0.00%) 8306 ( 0.00%) 93.33
ip6 217 ( 0.00%) 38751 ( 0.00%) 178.58
other 235586 ( 3.65%) 37375769 ( 1.31%) 158.65
frag 6199 ( 0.10%) 5747345 ( 0.20%) 927.14
tcpdump file: 200502011400.dump.gz (175.53 MB)