Traffic Trace Info
DumpFile: 200503311400.dump
FileSize: 436.34MB
Id: 200503311400
StartTime: Thu Mar 31 14:00:00 2005
EndTime: Thu Mar 31 14:15:00 2005
TotalTime: 900.03 seconds
TotalCapSize: 339.66MB CapLen: 96 bytes
# of packets: 6336111 (2433.26MB)
AvgRate: 22.68Mbps stddev:1.76M
IP flow (unique src/dst pair) Information
# of flows: 491238 (avg. 12.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.1% 1.8% 1.5% 1.5% 1.4% 1.3% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 343677
Top 10 bandwidth usage (bytes/total in %):
13.5% 11.2% 6.0% 6.0% 5.9% 4.9% 4.7% 4.1% 3.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200503311400.pktlen.png)
detailed numbers
[ 16- 31]: 56240
[ 32- 63]: 2385533
[ 64- 127]: 1895845
[ 128- 255]: 184129
[ 256- 511]: 171825
[ 512- 1023]: 321994
[ 1024- 2047]: 1320545
Protocol Breakdown
![[protocol breakdown chart]](200503311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6336111 (100.00%) 2551456613 (100.00%) 402.68
ip 6224230 ( 98.23%) 2548098822 ( 99.87%) 409.38
tcp 4961839 ( 78.31%) 2292727798 ( 89.86%) 462.07
http(s) 877380 ( 13.85%) 1094164364 ( 42.88%) 1247.08
http(c) 1471726 ( 23.23%) 176034200 ( 6.90%) 119.61
squid 16525 ( 0.26%) 8735536 ( 0.34%) 528.63
smtp 168096 ( 2.65%) 72989533 ( 2.86%) 434.21
nntp 149 ( 0.00%) 13339 ( 0.00%) 89.52
ftp 176616 ( 2.79%) 27158796 ( 1.06%) 153.77
pop3 14229 ( 0.22%) 13760779 ( 0.54%) 967.09
imap 1928 ( 0.03%) 618707 ( 0.02%) 320.91
telnet 258 ( 0.00%) 24546 ( 0.00%) 95.14
ssh 2722 ( 0.04%) 274981 ( 0.01%) 101.02
dns 4466 ( 0.07%) 300435 ( 0.01%) 67.27
bgp 123 ( 0.00%) 36011 ( 0.00%) 292.77
napster 6 ( 0.00%) 392 ( 0.00%) 65.33
realaud 560 ( 0.01%) 40123 ( 0.00%) 71.65
rtsp 32356 ( 0.51%) 2287250 ( 0.09%) 70.69
icecast 18750 ( 0.30%) 9359591 ( 0.37%) 499.18
hotline 21 ( 0.00%) 2618 ( 0.00%) 124.67
other 2157680 ( 34.05%) 886297545 ( 34.74%) 410.76
udp 787888 ( 12.43%) 198031282 ( 7.76%) 251.34
dns 643376 ( 10.15%) 164273746 ( 6.44%) 255.33
realaud 3666 ( 0.06%) 1439835 ( 0.06%) 392.75
halflif 2 ( 0.00%) 150 ( 0.00%) 75.00
starcra 10823 ( 0.17%) 705281 ( 0.03%) 65.17
everque 35 ( 0.00%) 4531 ( 0.00%) 129.46
other 122557 ( 1.93%) 31150735 ( 1.22%) 254.17
icmp 186455 ( 2.94%) 14535459 ( 0.57%) 77.96
ipsec 85 ( 0.00%) 7990 ( 0.00%) 94.00
ip6 1153 ( 0.02%) 295080 ( 0.01%) 255.92
other 286810 ( 4.53%) 42501213 ( 1.67%) 148.19
frag 5580 ( 0.09%) 4631278 ( 0.18%) 829.98
tcpdump file: 200503311400.dump.gz (166.82 MB)