Traffic Trace Info
DumpFile: 200503051400.dump
FileSize: 391.10MB
Id: 200503051400
StartTime: Sat Mar 5 14:00:00 2005
EndTime: Sat Mar 5 14:15:00 2005
TotalTime: 900.38 seconds
TotalCapSize: 306.40MB CapLen: 96 bytes
# of packets: 5550588 (2170.25MB)
AvgRate: 20.22Mbps stddev:1.34M
IP flow (unique src/dst pair) Information
# of flows: 657791 (avg. 8.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 5.1% 2.2% 1.7% 1.6% 1.5% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 389270
Top 10 bandwidth usage (bytes/total in %):
15.2% 11.3% 8.4% 6.3% 5.4% 5.3% 5.1% 4.9% 3.8% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200503051400.pktlen.png)
detailed numbers
[ 16- 31]: 27935
[ 32- 63]: 2654514
[ 64- 127]: 1140403
[ 128- 255]: 154574
[ 256- 511]: 139587
[ 512- 1023]: 208831
[ 1024- 2047]: 1224744
Protocol Breakdown
![[protocol breakdown chart]](200503051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5550588 (100.00%) 2275673837 (100.00%) 409.99
ip 5485908 ( 98.83%) 2273674556 ( 99.91%) 414.46
tcp 4838104 ( 87.16%) 2102736689 ( 92.40%) 434.62
http(s) 811683 ( 14.62%) 872491290 ( 38.34%) 1074.92
http(c) 1160913 ( 20.92%) 121554565 ( 5.34%) 104.71
squid 2420 ( 0.04%) 924684 ( 0.04%) 382.10
smtp 117143 ( 2.11%) 37394327 ( 1.64%) 319.22
nntp 74 ( 0.00%) 5630 ( 0.00%) 76.08
ftp 66452 ( 1.20%) 4788610 ( 0.21%) 72.06
pop3 3552 ( 0.06%) 2246069 ( 0.10%) 632.34
imap 1233 ( 0.02%) 282063 ( 0.01%) 228.76
telnet 391 ( 0.01%) 37408 ( 0.00%) 95.67
ssh 981 ( 0.02%) 465802 ( 0.02%) 474.82
dns 751 ( 0.01%) 58749 ( 0.00%) 78.23
bgp 195 ( 0.00%) 36477 ( 0.00%) 187.06
napster 654 ( 0.01%) 123487 ( 0.01%) 188.82
realaud 1693 ( 0.03%) 114121 ( 0.01%) 67.41
rtsp 42308 ( 0.76%) 50310549 ( 2.21%) 1189.15
icecast 6885 ( 0.12%) 588910 ( 0.03%) 85.54
other 2599531 ( 46.83%) 1010590182 ( 44.41%) 388.76
udp 491612 ( 8.86%) 158570700 ( 6.97%) 322.55
dns 335877 ( 6.05%) 104918700 ( 4.61%) 312.37
realaud 296 ( 0.01%) 28224 ( 0.00%) 95.35
halflif 5 ( 0.00%) 708 ( 0.00%) 141.60
everque 1 ( 0.00%) 61 ( 0.00%) 61.00
unreal 3 ( 0.00%) 240 ( 0.00%) 80.00
quake 1 ( 0.00%) 78 ( 0.00%) 78.00
other 151860 ( 2.74%) 53501122 ( 2.35%) 352.31
icmp 154432 ( 2.78%) 12055551 ( 0.53%) 78.06
ipsec 94 ( 0.00%) 8476 ( 0.00%) 90.17
ip6 972 ( 0.02%) 244802 ( 0.01%) 251.85
other 694 ( 0.01%) 58338 ( 0.00%) 84.06
frag 13 ( 0.00%) 780 ( 0.00%) 60.00
tcpdump file: 200503051400.dump.gz (148.54 MB)