Traffic Trace Info
DumpFile: 200503261400.dump
FileSize: 345.84MB
Id: 200503261400
StartTime: Sat Mar 26 14:00:00 2005
EndTime: Sat Mar 26 14:15:00 2005
TotalTime: 899.94 seconds
TotalCapSize: 269.96MB CapLen: 96 bytes
# of packets: 4972819 (1777.87MB)
AvgRate: 16.57Mbps stddev:1.48M
IP flow (unique src/dst pair) Information
# of flows: 592233 (avg. 8.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.2% 1.7% 1.7% 1.6% 1.4% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 433445
Top 10 bandwidth usage (bytes/total in %):
31.8% 8.1% 5.4% 4.6% 4.5% 4.5% 2.6% 2.2% 2.1% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200503261400.pktlen.png)
detailed numbers
[ 16- 31]: 22466
[ 32- 63]: 1994133
[ 64- 127]: 1442875
[ 128- 255]: 170992
[ 256- 511]: 169748
[ 512- 1023]: 237916
[ 1024- 2047]: 934689
Protocol Breakdown
![[protocol breakdown chart]](200503261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4972819 (100.00%) 1864231484 (100.00%) 374.88
ip 4911312 ( 98.76%) 1862348617 ( 99.90%) 379.20
tcp 3994549 ( 80.33%) 1657616238 ( 88.92%) 414.97
http(s) 939300 ( 18.89%) 1186007722 ( 63.62%) 1262.65
http(c) 1225129 ( 24.64%) 134608826 ( 7.22%) 109.87
squid 5344 ( 0.11%) 615679 ( 0.03%) 115.21
smtp 196068 ( 3.94%) 30504978 ( 1.64%) 155.58
nntp 172 ( 0.00%) 14609 ( 0.00%) 84.94
ftp 38523 ( 0.77%) 2988062 ( 0.16%) 77.57
pop3 2821 ( 0.06%) 1736905 ( 0.09%) 615.71
imap 4837 ( 0.10%) 315902 ( 0.02%) 65.31
telnet 192 ( 0.00%) 17460 ( 0.00%) 90.94
ssh 461 ( 0.01%) 150610 ( 0.01%) 326.70
dns 1043 ( 0.02%) 84488 ( 0.00%) 81.00
bgp 245 ( 0.00%) 105950 ( 0.01%) 432.45
napster 2860 ( 0.06%) 570800 ( 0.03%) 199.58
realaud 11 ( 0.00%) 947 ( 0.00%) 86.09
rtsp 4124 ( 0.08%) 287776 ( 0.02%) 69.78
icecast 5989 ( 0.12%) 378912 ( 0.02%) 63.27
other 1560451 ( 31.38%) 298984590 ( 16.04%) 191.60
udp 518377 ( 10.42%) 154808446 ( 8.30%) 298.64
dns 424048 ( 8.53%) 123731389 ( 6.64%) 291.79
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 309 ( 0.01%) 19166 ( 0.00%) 62.03
other 92539 ( 1.86%) 31006511 ( 1.66%) 335.06
icmp 140496 ( 2.83%) 11467833 ( 0.62%) 81.62
ipsec 759 ( 0.02%) 134632 ( 0.01%) 177.38
ip6 707 ( 0.01%) 100563 ( 0.01%) 142.24
other 256424 ( 5.16%) 38220905 ( 2.05%) 149.05
frag 10 ( 0.00%) 600 ( 0.00%) 60.00
tcpdump file: 200503261400.dump.gz (130.85 MB)