Traffic Trace Info
DumpFile: 200504101400.dump
FileSize: 293.42MB
Id: 200504101400
StartTime: Sun Apr 10 14:00:01 2005
EndTime: Sun Apr 10 14:15:00 2005
TotalTime: 899.67 seconds
TotalCapSize: 229.46MB CapLen: 96 bytes
# of packets: 4191756 (1396.95MB)
AvgRate: 13.03Mbps stddev:1.17M
IP flow (unique src/dst pair) Information
# of flows: 591099 (avg. 7.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 1.9% 1.8% 1.7% 1.4% 1.3% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 384489
Top 10 bandwidth usage (bytes/total in %):
26.1% 15.5% 8.2% 7.1% 3.6% 3.3% 2.1% 1.9% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200504101400.pktlen.png)
detailed numbers
[ 16- 31]: 15923
[ 32- 63]: 1979995
[ 64- 127]: 975824
[ 128- 255]: 162130
[ 256- 511]: 116060
[ 512- 1023]: 223879
[ 1024- 2047]: 717945
Protocol Breakdown
![[protocol breakdown chart]](200504101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4191756 (100.00%) 1464813477 (100.00%) 349.45
ip 4162540 ( 99.30%) 1463943245 ( 99.94%) 351.69
tcp 3344641 ( 79.79%) 1259071939 ( 85.95%) 376.44
http(s) 619650 ( 14.78%) 665672988 ( 45.44%) 1074.27
http(c) 744877 ( 17.77%) 73239135 ( 5.00%) 98.32
squid 1453 ( 0.03%) 105647 ( 0.01%) 72.71
smtp 93946 ( 2.24%) 14814992 ( 1.01%) 157.70
nntp 16 ( 0.00%) 960 ( 0.00%) 60.00
ftp 48479 ( 1.16%) 19214551 ( 1.31%) 396.35
pop3 1516 ( 0.04%) 262783 ( 0.02%) 173.34
imap 1147 ( 0.03%) 769058 ( 0.05%) 670.50
telnet 116 ( 0.00%) 9627 ( 0.00%) 82.99
ssh 17724 ( 0.42%) 21497578 ( 1.47%) 1212.91
dns 2544 ( 0.06%) 178174 ( 0.01%) 70.04
bgp 128 ( 0.00%) 34878 ( 0.00%) 272.48
napster 159 ( 0.00%) 12789 ( 0.00%) 80.43
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 1608 ( 0.04%) 183918 ( 0.01%) 114.38
icecast 8565 ( 0.20%) 517741 ( 0.04%) 60.45
other 1800921 ( 42.96%) 462495194 ( 31.57%) 256.81
udp 504736 ( 12.04%) 172723402 ( 11.79%) 342.21
dns 377248 ( 9.00%) 123499961 ( 8.43%) 327.37
realaud 66 ( 0.00%) 6396 ( 0.00%) 96.91
halflif 2 ( 0.00%) 120 ( 0.00%) 60.00
starcra 21 ( 0.00%) 1260 ( 0.00%) 60.00
everque 42 ( 0.00%) 4944 ( 0.00%) 117.71
other 126288 ( 3.01%) 48514406 ( 3.31%) 384.16
icmp 154133 ( 3.68%) 12336581 ( 0.84%) 80.04
ipsec 90 ( 0.00%) 8460 ( 0.00%) 94.00
ip6 690 ( 0.02%) 96612 ( 0.01%) 140.02
other 158250 ( 3.78%) 19706251 ( 1.35%) 124.53
frag 5440 ( 0.13%) 8008987 ( 0.55%) 1472.24
tcpdump file: 200504101400.dump.gz (109.29 MB)