Traffic Trace Info
DumpFile: 200503201400.dump
FileSize: 291.69MB
Id: 200503201400
StartTime: Sun Mar 20 14:00:00 2005
EndTime: Sun Mar 20 14:15:00 2005
TotalTime: 899.97 seconds
TotalCapSize: 228.37MB CapLen: 96 bytes
# of packets: 4149779 (1676.88MB)
AvgRate: 15.63Mbps stddev:0.86M
IP flow (unique src/dst pair) Information
# of flows: 478183 (avg. 8.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.0% 2.7% 1.5% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 323891
Top 10 bandwidth usage (bytes/total in %):
23.7% 20.1% 10.2% 10.0% 6.7% 5.8% 3.1% 2.8% 2.6% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200503201400.pktlen.png)
detailed numbers
[ 16- 31]: 13552
[ 32- 63]: 1711937
[ 64- 127]: 974813
[ 128- 255]: 183174
[ 256- 511]: 131355
[ 512- 1023]: 224769
[ 1024- 2047]: 910179
Protocol Breakdown
![[protocol breakdown chart]](200503201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4149779 (100.00%) 1758334298 (100.00%) 423.72
ip 4108226 ( 99.00%) 1757054709 ( 99.93%) 427.69
tcp 3325345 ( 80.13%) 1573178606 ( 89.47%) 473.09
http(s) 734791 ( 17.71%) 819542542 ( 46.61%) 1115.34
http(c) 495607 ( 11.94%) 60887473 ( 3.46%) 122.85
squid 6398 ( 0.15%) 394663 ( 0.02%) 61.69
smtp 96078 ( 2.32%) 19606886 ( 1.12%) 204.07
nntp 75 ( 0.00%) 5430 ( 0.00%) 72.40
ftp 7667 ( 0.18%) 789366 ( 0.04%) 102.96
pop3 3987 ( 0.10%) 3675939 ( 0.21%) 921.98
imap 1680 ( 0.04%) 1728996 ( 0.10%) 1029.16
telnet 5 ( 0.00%) 300 ( 0.00%) 60.00
ssh 94393 ( 2.27%) 15979110 ( 0.91%) 169.28
dns 826 ( 0.02%) 67224 ( 0.00%) 81.38
bgp 168 ( 0.00%) 34246 ( 0.00%) 203.85
napster 1724 ( 0.04%) 184628 ( 0.01%) 107.09
realaud 41 ( 0.00%) 2542 ( 0.00%) 62.00
rtsp 14585 ( 0.35%) 907957 ( 0.05%) 62.25
icecast 8383 ( 0.20%) 539740 ( 0.03%) 64.39
other 1856893 ( 44.75%) 648756485 ( 36.90%) 349.38
udp 505027 ( 12.17%) 153156487 ( 8.71%) 303.26
dns 387210 ( 9.33%) 122278515 ( 6.95%) 315.79
realaud 1399 ( 0.03%) 83940 ( 0.00%) 60.00
everque 2 ( 0.00%) 161 ( 0.00%) 80.50
quake 7 ( 0.00%) 479 ( 0.00%) 68.43
other 116052 ( 2.80%) 30780990 ( 1.75%) 265.23
icmp 155564 ( 3.75%) 12146502 ( 0.69%) 78.08
ipsec 86 ( 0.00%) 8084 ( 0.00%) 94.00
ip6 1064 ( 0.03%) 261650 ( 0.01%) 245.91
other 121140 ( 2.92%) 18303380 ( 1.04%) 151.09
frag 324 ( 0.01%) 243570 ( 0.01%) 751.76
tcpdump file: 200503201400.dump.gz (112.73 MB)