Traffic Trace Info
DumpFile: 200503031400.dump
FileSize: 446.69MB
Id: 200503031400
StartTime: Thu Mar 3 14:00:00 2005
EndTime: Thu Mar 3 14:15:00 2005
TotalTime: 900.45 seconds
TotalCapSize: 348.76MB CapLen: 96 bytes
# of packets: 6417357 (2228.02MB)
AvgRate: 20.76Mbps stddev:1.55M
IP flow (unique src/dst pair) Information
# of flows: 639832 (avg. 10.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 2.8% 2.4% 2.3% 1.6% 1.4% 1.2% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 382943
Top 10 bandwidth usage (bytes/total in %):
15.9% 13.2% 7.3% 6.6% 5.9% 5.0% 2.9% 2.8% 2.5% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200503031400.pktlen.png)
detailed numbers
[ 16- 31]: 37188
[ 32- 63]: 2552075
[ 64- 127]: 1868924
[ 128- 255]: 298824
[ 256- 511]: 206514
[ 512- 1023]: 286131
[ 1024- 2047]: 1167701
Protocol Breakdown
![[protocol breakdown chart]](200503031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6417357 (100.00%) 2336243883 (100.00%) 364.05
ip 6333025 ( 98.69%) 2333641292 ( 99.89%) 368.49
tcp 5043587 ( 78.59%) 2032763249 ( 87.01%) 403.04
http(s) 722692 ( 11.26%) 804991237 ( 34.46%) 1113.88
http(c) 1642930 ( 25.60%) 189144726 ( 8.10%) 115.13
squid 2494 ( 0.04%) 374908 ( 0.02%) 150.32
smtp 171566 ( 2.67%) 54881263 ( 2.35%) 319.88
nntp 149 ( 0.00%) 10177 ( 0.00%) 68.30
ftp 29803 ( 0.46%) 9338151 ( 0.40%) 313.33
pop3 10720 ( 0.17%) 5763801 ( 0.25%) 537.67
imap 2696 ( 0.04%) 1092242 ( 0.05%) 405.13
telnet 3950 ( 0.06%) 1874951 ( 0.08%) 474.67
ssh 3918 ( 0.06%) 2572516 ( 0.11%) 656.59
dns 737 ( 0.01%) 50188 ( 0.00%) 68.10
bgp 199 ( 0.00%) 43767 ( 0.00%) 219.93
napster 1918 ( 0.03%) 309624 ( 0.01%) 161.43
realaud 9 ( 0.00%) 594 ( 0.00%) 66.00
rtsp 79297 ( 1.24%) 56047539 ( 2.40%) 706.81
icecast 4812 ( 0.07%) 417438 ( 0.02%) 86.75
other 2340526 ( 36.47%) 904992607 ( 38.74%) 386.66
udp 746417 ( 11.63%) 225646431 ( 9.66%) 302.31
dns 488115 ( 7.61%) 146346984 ( 6.26%) 299.82
rip 122 ( 0.00%) 8052 ( 0.00%) 66.00
realaud 273 ( 0.00%) 25304 ( 0.00%) 92.69
halflif 22 ( 0.00%) 1320 ( 0.00%) 60.00
everque 4 ( 0.00%) 252 ( 0.00%) 63.00
quake 2555 ( 0.04%) 157684 ( 0.01%) 61.72
other 247329 ( 3.85%) 78713019 ( 3.37%) 318.25
icmp 279683 ( 4.36%) 20803215 ( 0.89%) 74.38
ipsec 86 ( 0.00%) 8084 ( 0.00%) 94.00
ip6 527 ( 0.01%) 76329 ( 0.00%) 144.84
other 262725 ( 4.09%) 54343984 ( 2.33%) 206.85
frag 4883 ( 0.08%) 3893364 ( 0.17%) 797.33
tcpdump file: 200503031400.dump.gz (172.16 MB)