Traffic Trace Info
DumpFile: 200502261400.dump
FileSize: 362.58MB
Id: 200502261400
StartTime: Sat Feb 26 14:00:00 2005
EndTime: Sat Feb 26 14:15:00 2005
TotalTime: 899.57 seconds
TotalCapSize: 283.58MB CapLen: 96 bytes
# of packets: 5177574 (1798.37MB)
AvgRate: 16.77Mbps stddev:1.93M
IP flow (unique src/dst pair) Information
# of flows: 579462 (avg. 8.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.5% 1.6% 1.6% 1.5% 1.2% 1.1% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 317515
Top 10 bandwidth usage (bytes/total in %):
18.9% 10.7% 6.8% 4.8% 4.3% 4.0% 4.0% 2.6% 2.6% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200502261400.pktlen.png)
detailed numbers
[ 16- 31]: 21914
[ 32- 63]: 2159585
[ 64- 127]: 1461345
[ 128- 255]: 180498
[ 256- 511]: 163622
[ 512- 1023]: 251668
[ 1024- 2047]: 938942
Protocol Breakdown
![[protocol breakdown chart]](200502261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5177574 (100.00%) 1885728050 (100.00%) 364.21
ip 5129164 ( 99.07%) 1884236819 ( 99.92%) 367.36
tcp 4109685 ( 79.37%) 1628591547 ( 86.36%) 396.28
http(s) 541223 ( 10.45%) 612629336 ( 32.49%) 1131.94
http(c) 1240822 ( 23.97%) 145051558 ( 7.69%) 116.90
squid 3288 ( 0.06%) 883275 ( 0.05%) 268.64
smtp 147897 ( 2.86%) 52885754 ( 2.80%) 357.59
nntp 199 ( 0.00%) 25736 ( 0.00%) 129.33
ftp 25643 ( 0.50%) 2136947 ( 0.11%) 83.33
pop3 2609 ( 0.05%) 1057968 ( 0.06%) 405.51
imap 4671 ( 0.09%) 966416 ( 0.05%) 206.90
telnet 689 ( 0.01%) 45999 ( 0.00%) 66.76
ssh 5345 ( 0.10%) 2247501 ( 0.12%) 420.49
dns 347 ( 0.01%) 27080 ( 0.00%) 78.04
bgp 194 ( 0.00%) 37462 ( 0.00%) 193.10
napster 7717 ( 0.15%) 2744887 ( 0.15%) 355.69
rtsp 5930 ( 0.11%) 2886441 ( 0.15%) 486.75
icecast 20053 ( 0.39%) 26414372 ( 1.40%) 1317.23
other 2088837 ( 40.34%) 778055843 ( 41.26%) 372.48
udp 605672 ( 11.70%) 195726581 ( 10.38%) 323.16
dns 370078 ( 7.15%) 111756916 ( 5.93%) 301.98
realaud 505 ( 0.01%) 38286 ( 0.00%) 75.81
starcra 2469 ( 0.05%) 160275 ( 0.01%) 64.91
everque 17 ( 0.00%) 1148 ( 0.00%) 67.53
quake 14790 ( 0.29%) 1005622 ( 0.05%) 67.99
other 214412 ( 4.14%) 82648486 ( 4.38%) 385.47
icmp 170476 ( 3.29%) 13254420 ( 0.70%) 77.75
ipsec 90 ( 0.00%) 8400 ( 0.00%) 93.33
ip6 204 ( 0.00%) 40495 ( 0.00%) 198.50
other 243037 ( 4.69%) 46615376 ( 2.47%) 191.80
frag 409 ( 0.01%) 24514 ( 0.00%) 59.94
tcpdump file: 200502261400.dump.gz (137.07 MB)