Traffic Trace Info
DumpFile: 200503061400.dump
FileSize: 395.75MB
Id: 200503061400
StartTime: Sun Mar 6 14:00:00 2005
EndTime: Sun Mar 6 14:15:00 2005
TotalTime: 899.95 seconds
TotalCapSize: 309.73MB CapLen: 96 bytes
# of packets: 5636789 (1966.39MB)
AvgRate: 18.33Mbps stddev:1.77M
IP flow (unique src/dst pair) Information
# of flows: 627880 (avg. 8.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.6% 2.3% 1.7% 1.6% 1.4% 1.4% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 355332
Top 10 bandwidth usage (bytes/total in %):
18.1% 13.4% 7.6% 7.2% 5.5% 5.0% 4.4% 3.7% 3.1% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200503061400.pktlen.png)
detailed numbers
[ 16- 31]: 25538
[ 32- 63]: 2726655
[ 64- 127]: 1294483
[ 128- 255]: 171430
[ 256- 511]: 135174
[ 512- 1023]: 213254
[ 1024- 2047]: 1070255
Protocol Breakdown
![[protocol breakdown chart]](200503061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5636789 (100.00%) 2061905180 (100.00%) 365.79
ip 5580794 ( 99.01%) 2060180823 ( 99.92%) 369.16
tcp 4716166 ( 83.67%) 1819820823 ( 88.26%) 385.87
http(s) 701123 ( 12.44%) 784642696 ( 38.05%) 1119.12
http(c) 1295467 ( 22.98%) 105571501 ( 5.12%) 81.49
squid 2977 ( 0.05%) 232108 ( 0.01%) 77.97
smtp 122874 ( 2.18%) 23594735 ( 1.14%) 192.02
nntp 25 ( 0.00%) 2059 ( 0.00%) 82.36
ftp 120013 ( 2.13%) 8265212 ( 0.40%) 68.87
pop3 4009 ( 0.07%) 4479074 ( 0.22%) 1117.25
imap 1217 ( 0.02%) 764900 ( 0.04%) 628.51
telnet 21 ( 0.00%) 2633 ( 0.00%) 125.38
ssh 265 ( 0.00%) 47097 ( 0.00%) 177.72
dns 1003 ( 0.02%) 83537 ( 0.00%) 83.29
bgp 197 ( 0.00%) 27291 ( 0.00%) 138.53
napster 4196 ( 0.07%) 369487 ( 0.02%) 88.06
realaud 1649 ( 0.03%) 700090 ( 0.03%) 424.55
rtsp 8391 ( 0.15%) 730539 ( 0.04%) 87.06
icecast 7038 ( 0.12%) 429808 ( 0.02%) 61.07
other 2431046 ( 43.13%) 889378686 ( 43.13%) 365.84
udp 661879 ( 11.74%) 221587014 ( 10.75%) 334.78
dns 341001 ( 6.05%) 118907939 ( 5.77%) 348.70
realaud 2659 ( 0.05%) 2826637 ( 0.14%) 1063.05
halflif 5 ( 0.00%) 615 ( 0.00%) 123.00
everque 41 ( 0.00%) 5334 ( 0.00%) 130.10
other 313652 ( 5.56%) 99692504 ( 4.83%) 317.84
icmp 197647 ( 3.51%) 15036572 ( 0.73%) 76.08
ipsec 90 ( 0.00%) 8400 ( 0.00%) 93.33
ip6 651 ( 0.01%) 91468 ( 0.00%) 140.50
other 4361 ( 0.08%) 3636546 ( 0.18%) 833.88
frag 11 ( 0.00%) 634 ( 0.00%) 57.64
tcpdump file: 200503061400.dump.gz (148.27 MB)