Traffic Trace Info
DumpFile: 200504201400.dump
FileSize: 505.25MB
Id: 200504201400
StartTime: Wed Apr 20 14:00:01 2005
EndTime: Wed Apr 20 14:15:00 2005
TotalTime: 899.33 seconds
TotalCapSize: 393.98MB CapLen: 96 bytes
# of packets: 7292120 (2765.81MB)
AvgRate: 25.80Mbps stddev:1.95M
IP flow (unique src/dst pair) Information
# of flows: 505869 (avg. 14.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.9% 1.8% 1.3% 1.2% 1.0% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 344050
Top 10 bandwidth usage (bytes/total in %):
11.6% 10.6% 7.1% 4.9% 4.5% 4.5% 3.7% 2.9% 2.5% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200504201400.pktlen.png)
detailed numbers
[ 16- 31]: 76356
[ 32- 63]: 2818506
[ 64- 127]: 2023130
[ 128- 255]: 220459
[ 256- 511]: 318921
[ 512- 1023]: 357073
[ 1024- 2047]: 1477675
Protocol Breakdown
![[protocol breakdown chart]](200504201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7292120 (100.00%) 2900167027 (100.00%) 397.71
ip 7135593 ( 97.85%) 2895451274 ( 99.84%) 405.78
tcp 6015113 ( 82.49%) 2548010080 ( 87.86%) 423.60
http(s) 1304951 ( 17.90%) 1464302126 ( 50.49%) 1122.11
http(c) 2301035 ( 31.56%) 277991155 ( 9.59%) 120.81
squid 2057 ( 0.03%) 445497 ( 0.02%) 216.58
smtp 142133 ( 1.95%) 62915956 ( 2.17%) 442.66
nntp 188 ( 0.00%) 14847 ( 0.00%) 78.97
ftp 50691 ( 0.70%) 13550049 ( 0.47%) 267.31
pop3 42237 ( 0.58%) 55018581 ( 1.90%) 1302.62
imap 2618 ( 0.04%) 424094 ( 0.01%) 161.99
telnet 4203 ( 0.06%) 899193 ( 0.03%) 213.94
ssh 13265 ( 0.18%) 2238970 ( 0.08%) 168.79
dns 524 ( 0.01%) 38416 ( 0.00%) 73.31
bgp 156 ( 0.00%) 74362 ( 0.00%) 476.68
napster 1672 ( 0.02%) 204295 ( 0.01%) 122.19
realaud 4843 ( 0.07%) 332009 ( 0.01%) 68.55
rtsp 35681 ( 0.49%) 6554654 ( 0.23%) 183.70
icecast 56107 ( 0.77%) 46857907 ( 1.62%) 835.15
hotline 3 ( 0.00%) 182 ( 0.00%) 60.67
other 2029700 ( 27.83%) 615354395 ( 21.22%) 303.18
udp 727925 ( 9.98%) 282262765 ( 9.73%) 387.76
dns 495324 ( 6.79%) 157378201 ( 5.43%) 317.73
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 7522 ( 0.10%) 3826268 ( 0.13%) 508.68
halflif 9230 ( 0.13%) 1956705 ( 0.07%) 211.99
everque 1 ( 0.00%) 60 ( 0.00%) 60.00
other 211636 ( 2.90%) 118956664 ( 4.10%) 562.08
icmp 139952 ( 1.92%) 11419309 ( 0.39%) 81.59
ipsec 140 ( 0.00%) 19296 ( 0.00%) 137.83
ip6 460 ( 0.01%) 68438 ( 0.00%) 148.78
other 252003 ( 3.46%) 53671386 ( 1.85%) 212.98
frag 5296 ( 0.07%) 7502673 ( 0.26%) 1416.67
tcpdump file: 200504201400.dump.gz (199.88 MB)