Traffic Trace Info
DumpFile: 200503251400.dump
FileSize: 365.72MB
Id: 200503251400
StartTime: Fri Mar 25 14:00:00 2005
EndTime: Fri Mar 25 14:15:00 2005
TotalTime: 899.93 seconds
TotalCapSize: 284.79MB CapLen: 96 bytes
# of packets: 5304283 (2234.61MB)
AvgRate: 20.83Mbps stddev:1.44M
IP flow (unique src/dst pair) Information
# of flows: 420528 (avg. 12.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 5.6% 1.7% 1.2% 0.7% 0.6% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 280483
Top 10 bandwidth usage (bytes/total in %):
21.5% 11.4% 8.0% 7.1% 5.6% 5.6% 5.3% 4.2% 2.8% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200503251400.pktlen.png)
detailed numbers
[ 16- 31]: 31586
[ 32- 63]: 1865234
[ 64- 127]: 1502388
[ 128- 255]: 217144
[ 256- 511]: 174620
[ 512- 1023]: 273592
[ 1024- 2047]: 1239719
Protocol Breakdown
![[protocol breakdown chart]](200503251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5304283 (100.00%) 2343155591 (100.00%) 441.75
ip 5213385 ( 98.29%) 2340363016 ( 99.88%) 448.91
tcp 4223953 ( 79.63%) 2002682315 ( 85.47%) 474.13
http(s) 782544 ( 14.75%) 1004417453 ( 42.87%) 1283.53
http(c) 1371576 ( 25.86%) 167268043 ( 7.14%) 121.95
squid 7313 ( 0.14%) 749729 ( 0.03%) 102.52
smtp 206286 ( 3.89%) 34390486 ( 1.47%) 166.71
nntp 113 ( 0.00%) 8735 ( 0.00%) 77.30
ftp 21911 ( 0.41%) 1473207 ( 0.06%) 67.24
pop3 4066 ( 0.08%) 356327 ( 0.02%) 87.64
imap 6500 ( 0.12%) 1452875 ( 0.06%) 223.52
telnet 439 ( 0.01%) 37779 ( 0.00%) 86.06
ssh 4388 ( 0.08%) 4599968 ( 0.20%) 1048.31
dns 1009 ( 0.02%) 78629 ( 0.00%) 77.93
bgp 169 ( 0.00%) 46182 ( 0.00%) 273.27
napster 54 ( 0.00%) 3717 ( 0.00%) 68.83
realaud 233 ( 0.00%) 16362 ( 0.00%) 70.22
rtsp 25567 ( 0.48%) 4388052 ( 0.19%) 171.63
icecast 16735 ( 0.32%) 1209033 ( 0.05%) 72.25
hotline 6 ( 0.00%) 1045 ( 0.00%) 174.17
other 1761503 ( 33.21%) 781710877 ( 33.36%) 443.77
udp 771534 ( 14.55%) 309696106 ( 13.22%) 401.40
dns 473368 ( 8.92%) 149353990 ( 6.37%) 315.51
realaud 816 ( 0.02%) 68534 ( 0.00%) 83.99
halflif 1 ( 0.00%) 73 ( 0.00%) 73.00
everque 19 ( 0.00%) 4063 ( 0.00%) 213.84
other 294447 ( 5.55%) 160169576 ( 6.84%) 543.97
icmp 114059 ( 2.15%) 9454698 ( 0.40%) 82.89
ipsec 98 ( 0.00%) 9613 ( 0.00%) 98.09
ip6 713 ( 0.01%) 104708 ( 0.00%) 146.86
other 103028 ( 1.94%) 18415576 ( 0.79%) 178.74
frag 5450 ( 0.10%) 7517594 ( 0.32%) 1379.38
tcpdump file: 200503251400.dump.gz (144.55 MB)