Traffic Trace Info
DumpFile: 200502071400.dump
FileSize: 442.25MB
Id: 200502071400
StartTime: Mon Feb 7 14:00:01 2005
EndTime: Mon Feb 7 14:15:00 2005
TotalTime: 899.23 seconds
TotalCapSize: 343.76MB CapLen: 96 bytes
# of packets: 6454685 (2456.12MB)
AvgRate: 22.91Mbps stddev:1.60M
IP flow (unique src/dst pair) Information
# of flows: 404288 (avg. 15.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 5.8% 2.5% 1.2% 1.0% 0.9% 0.8% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 258354
Top 10 bandwidth usage (bytes/total in %):
9.9% 7.4% 6.2% 5.8% 5.8% 4.9% 4.4% 3.8% 3.5% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200502071400.pktlen.png)
detailed numbers
[ 16- 31]: 35589
[ 32- 63]: 2273159
[ 64- 127]: 1882808
[ 128- 255]: 281383
[ 256- 511]: 193802
[ 512- 1023]: 562889
[ 1024- 2047]: 1225055
Protocol Breakdown
![[protocol breakdown chart]](200502071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6454685 (100.00%) 2575423322 (100.00%) 399.00
ip 6367945 ( 98.66%) 2572733418 ( 99.90%) 404.01
tcp 5160605 ( 79.95%) 2298951518 ( 89.26%) 445.48
http(s) 1072281 ( 16.61%) 982595309 ( 38.15%) 916.36
http(c) 1898509 ( 29.41%) 253560277 ( 9.85%) 133.56
squid 23649 ( 0.37%) 7511980 ( 0.29%) 317.64
smtp 135544 ( 2.10%) 47267241 ( 1.84%) 348.72
nntp 584 ( 0.01%) 49417 ( 0.00%) 84.62
ftp 18821 ( 0.29%) 8241598 ( 0.32%) 437.89
pop3 6055 ( 0.09%) 3158188 ( 0.12%) 521.58
imap 1988 ( 0.03%) 154049 ( 0.01%) 77.49
telnet 1349 ( 0.02%) 111204 ( 0.00%) 82.43
ssh 31317 ( 0.49%) 25350496 ( 0.98%) 809.48
dns 561 ( 0.01%) 39307 ( 0.00%) 70.07
bgp 226 ( 0.00%) 77122 ( 0.00%) 341.25
napster 209 ( 0.00%) 15950 ( 0.00%) 76.32
realaud 3239 ( 0.05%) 196735 ( 0.01%) 60.74
rtsp 41163 ( 0.64%) 12158411 ( 0.47%) 295.37
icecast 16925 ( 0.26%) 15593186 ( 0.61%) 921.31
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 1878804 ( 29.11%) 941870014 ( 36.57%) 501.31
udp 879963 ( 13.63%) 227833596 ( 8.85%) 258.91
dns 453697 ( 7.03%) 126029479 ( 4.89%) 277.78
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 1141 ( 0.02%) 89910 ( 0.00%) 78.80
halflif 20 ( 0.00%) 1200 ( 0.00%) 60.00
starcra 5 ( 0.00%) 510 ( 0.00%) 102.00
everque 30 ( 0.00%) 4130 ( 0.00%) 137.67
quake 2375 ( 0.04%) 148015 ( 0.01%) 62.32
other 411434 ( 6.37%) 94527002 ( 3.67%) 229.75
icmp 108424 ( 1.68%) 9161930 ( 0.36%) 84.50
ipsec 503 ( 0.01%) 85794 ( 0.00%) 170.56
ip6 217 ( 0.00%) 43584 ( 0.00%) 200.85
other 218233 ( 3.38%) 36656996 ( 1.42%) 167.97
frag 32185 ( 0.50%) 47057165 ( 1.83%) 1462.08
tcpdump file: 200502071400.dump.gz (171.45 MB)