Traffic Trace Info
DumpFile: 200502131400.dump
FileSize: 313.45MB
Id: 200502131400
StartTime: Sun Feb 13 14:00:01 2005
EndTime: Sun Feb 13 14:15:00 2005
TotalTime: 899.19 seconds
TotalCapSize: 243.91MB CapLen: 96 bytes
# of packets: 4557554 (2170.52MB)
AvgRate: 20.25Mbps stddev:1.35M
IP flow (unique src/dst pair) Information
# of flows: 384993 (avg. 11.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
21.2% 8.5% 6.4% 1.8% 1.2% 1.0% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 249859
Top 10 bandwidth usage (bytes/total in %):
23.1% 21.8% 11.3% 9.3% 8.6% 6.5% 6.5% 6.5% 4.5% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200502131400.pktlen.png)
detailed numbers
[ 16- 31]: 18116
[ 32- 63]: 1691755
[ 64- 127]: 1005250
[ 128- 255]: 216867
[ 256- 511]: 121161
[ 512- 1023]: 260499
[ 1024- 2047]: 1243906
Protocol Breakdown
![[protocol breakdown chart]](200502131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4557554 (100.00%) 2275955336 (100.00%) 499.38
ip 4516391 ( 99.10%) 2274684714 ( 99.94%) 503.65
tcp 3592715 ( 78.83%) 1982469502 ( 87.10%) 551.80
http(s) 489975 ( 10.75%) 562514540 ( 24.72%) 1148.05
http(c) 896084 ( 19.66%) 94922919 ( 4.17%) 105.93
squid 1051 ( 0.02%) 105979 ( 0.00%) 100.84
smtp 123760 ( 2.72%) 31447594 ( 1.38%) 254.10
nntp 27 ( 0.00%) 2074 ( 0.00%) 76.81
ftp 13517 ( 0.30%) 3011966 ( 0.13%) 222.83
pop3 4414 ( 0.10%) 5355057 ( 0.24%) 1213.20
imap 1541 ( 0.03%) 94861 ( 0.00%) 61.56
telnet 3666 ( 0.08%) 247088 ( 0.01%) 67.40
ssh 356 ( 0.01%) 217509 ( 0.01%) 610.98
dns 403 ( 0.01%) 27006 ( 0.00%) 67.01
bgp 293 ( 0.01%) 138805 ( 0.01%) 473.74
napster 302 ( 0.01%) 27858 ( 0.00%) 92.25
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 3933 ( 0.09%) 2177500 ( 0.10%) 553.65
icecast 14169 ( 0.31%) 1520122 ( 0.07%) 107.29
other 2026406 ( 44.46%) 1280221850 ( 56.25%) 631.77
udp 708831 ( 15.55%) 266182791 ( 11.70%) 375.52
dns 401622 ( 8.81%) 123264871 ( 5.42%) 306.92
realaud 899 ( 0.02%) 53940 ( 0.00%) 60.00
quake 12140 ( 0.27%) 811896 ( 0.04%) 66.88
other 288212 ( 6.32%) 137986531 ( 6.06%) 478.77
icmp 96948 ( 2.13%) 8176278 ( 0.36%) 84.34
ipsec 126 ( 0.00%) 15588 ( 0.00%) 123.71
ip6 211 ( 0.00%) 42222 ( 0.00%) 200.10
other 117560 ( 2.58%) 17798333 ( 0.78%) 151.40
frag 29302 ( 0.64%) 41722776 ( 1.83%) 1423.89
tcpdump file: 200502131400.dump.gz (111.62 MB)