Traffic Trace Info
DumpFile: 200502201400.dump
FileSize: 381.17MB
Id: 200502201400
StartTime: Sun Feb 20 14:00:01 2005
EndTime: Sun Feb 20 14:15:00 2005
TotalTime: 899.74 seconds
TotalCapSize: 297.17MB CapLen: 96 bytes
# of packets: 5505150 (2131.65MB)
AvgRate: 19.87Mbps stddev:3.72M
IP flow (unique src/dst pair) Information
# of flows: 710779 (avg. 7.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.1% 2.6% 1.6% 1.5% 1.2% 1.1% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 371503
Top 10 bandwidth usage (bytes/total in %):
14.6% 10.8% 10.2% 10.2% 4.2% 4.0% 3.8% 3.3% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200502201400.pktlen.png)
detailed numbers
[ 16- 31]: 24989
[ 32- 63]: 2391498
[ 64- 127]: 1318203
[ 128- 255]: 220429
[ 256- 511]: 125362
[ 512- 1023]: 248546
[ 1024- 2047]: 1176123
Protocol Breakdown
![[protocol breakdown chart]](200502201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5505150 (100.00%) 2235194689 (100.00%) 406.02
ip 5450651 ( 99.01%) 2233517245 ( 99.92%) 409.77
tcp 4275289 ( 77.66%) 1821357217 ( 81.49%) 426.02
http(s) 626106 ( 11.37%) 763301817 ( 34.15%) 1219.13
http(c) 968235 ( 17.59%) 91162336 ( 4.08%) 94.15
squid 8035 ( 0.15%) 7696860 ( 0.34%) 957.92
smtp 94539 ( 1.72%) 22108909 ( 0.99%) 233.86
nntp 69 ( 0.00%) 5127 ( 0.00%) 74.30
ftp 4549 ( 0.08%) 2676974 ( 0.12%) 588.48
pop3 2290 ( 0.04%) 681896 ( 0.03%) 297.77
imap 5798 ( 0.11%) 2828748 ( 0.13%) 487.88
telnet 222 ( 0.00%) 16132 ( 0.00%) 72.67
ssh 9356 ( 0.17%) 5146784 ( 0.23%) 550.11
dns 510 ( 0.01%) 35375 ( 0.00%) 69.36
bgp 274 ( 0.00%) 111274 ( 0.00%) 406.11
napster 48 ( 0.00%) 6157 ( 0.00%) 128.27
realaud 65 ( 0.00%) 8837 ( 0.00%) 135.95
rtsp 46083 ( 0.84%) 30535351 ( 1.37%) 662.62
icecast 6466 ( 0.12%) 9685618 ( 0.43%) 1497.93
other 2487912 ( 45.19%) 884846847 ( 39.59%) 355.66
udp 880375 ( 15.99%) 382598284 ( 17.12%) 434.59
dns 366421 ( 6.66%) 113715078 ( 5.09%) 310.34
realaud 50794 ( 0.92%) 62103598 ( 2.78%) 1222.66
starcra 3 ( 0.00%) 252 ( 0.00%) 84.00
everque 30 ( 0.00%) 4140 ( 0.00%) 138.00
quake 3 ( 0.00%) 448 ( 0.00%) 149.33
other 454380 ( 8.25%) 200958178 ( 8.99%) 442.27
icmp 147703 ( 2.68%) 11631392 ( 0.52%) 78.75
ipsec 1474 ( 0.03%) 199278 ( 0.01%) 135.20
ip6 621 ( 0.01%) 102327 ( 0.00%) 164.78
other 145189 ( 2.64%) 17628747 ( 0.79%) 121.42
frag 50866 ( 0.92%) 73977348 ( 3.31%) 1454.36
tcpdump file: 200502201400.dump.gz (140.90 MB)