Traffic Trace Info
DumpFile: 200504121400.dump
FileSize: 479.36MB
Id: 200504121400
StartTime: Tue Apr 12 14:00:00 2005
EndTime: Tue Apr 12 14:15:01 2005
TotalTime: 900.55 seconds
TotalCapSize: 373.22MB CapLen: 96 bytes
# of packets: 6956258 (2574.57MB)
AvgRate: 23.98Mbps stddev:1.80M
IP flow (unique src/dst pair) Information
# of flows: 486135 (avg. 14.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.3% 1.5% 1.2% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 320247
Top 10 bandwidth usage (bytes/total in %):
14.8% 11.1% 7.6% 3.9% 3.5% 3.4% 3.4% 2.6% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200504121400.pktlen.png)
detailed numbers
[ 16- 31]: 68176
[ 32- 63]: 2907252
[ 64- 127]: 1757426
[ 128- 255]: 240606
[ 256- 511]: 226198
[ 512- 1023]: 394876
[ 1024- 2047]: 1361724
Protocol Breakdown
![[protocol breakdown chart]](200504121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6956258 (100.00%) 2699633050 (100.00%) 388.09
ip 6816513 ( 97.99%) 2695423730 ( 99.84%) 395.43
tcp 5830012 ( 83.81%) 2460737613 ( 91.15%) 422.08
http(s) 1345525 ( 19.34%) 1421288025 ( 52.65%) 1056.31
http(c) 2213940 ( 31.83%) 295531367 ( 10.95%) 133.49
squid 2485 ( 0.04%) 1404598 ( 0.05%) 565.23
smtp 158104 ( 2.27%) 62850214 ( 2.33%) 397.52
nntp 225 ( 0.00%) 20164 ( 0.00%) 89.62
ftp 168937 ( 2.43%) 14527876 ( 0.54%) 86.00
pop3 5604 ( 0.08%) 881353 ( 0.03%) 157.27
imap 5862 ( 0.08%) 2078601 ( 0.08%) 354.59
telnet 1188 ( 0.02%) 114478 ( 0.00%) 96.36
ssh 1515 ( 0.02%) 166616 ( 0.01%) 109.98
dns 2449 ( 0.04%) 177847 ( 0.01%) 72.62
bgp 126 ( 0.00%) 33348 ( 0.00%) 264.67
napster 10651 ( 0.15%) 1037685 ( 0.04%) 97.43
realaud 2561 ( 0.04%) 181873 ( 0.01%) 71.02
rtsp 30397 ( 0.44%) 8511711 ( 0.32%) 280.02
icecast 264 ( 0.00%) 20861 ( 0.00%) 79.02
hotline 3 ( 0.00%) 609 ( 0.00%) 203.00
other 1857586 ( 26.70%) 651131937 ( 24.12%) 350.53
udp 589246 ( 8.47%) 181126182 ( 6.71%) 307.39
dns 396754 ( 5.70%) 118481077 ( 4.39%) 298.63
realaud 1869 ( 0.03%) 157754 ( 0.01%) 84.41
halflif 16 ( 0.00%) 1174 ( 0.00%) 73.38
everque 34 ( 0.00%) 5466 ( 0.00%) 160.76
quake 2281 ( 0.03%) 137576 ( 0.01%) 60.31
other 185007 ( 2.66%) 62230001 ( 2.31%) 336.37
icmp 144508 ( 2.08%) 11951559 ( 0.44%) 82.71
ipsec 80 ( 0.00%) 8128 ( 0.00%) 101.60
ip6 567 ( 0.01%) 79690 ( 0.00%) 140.55
other 252100 ( 3.62%) 41520558 ( 1.54%) 164.70
frag 16 ( 0.00%) 960 ( 0.00%) 60.00
tcpdump file: 200504121400.dump.gz (187.51 MB)