Traffic Trace Info
DumpFile: 200504221400.dump
FileSize: 450.96MB
Id: 200504221400
StartTime: Fri Apr 22 14:00:01 2005
EndTime: Fri Apr 22 14:15:00 2005
TotalTime: 899.76 seconds
TotalCapSize: 353.17MB CapLen: 96 bytes
# of packets: 6408835 (2613.20MB)
AvgRate: 24.36Mbps stddev:2.02M
IP flow (unique src/dst pair) Information
# of flows: 455938 (avg. 14.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.0% 2.4% 2.2% 1.5% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 328860
Top 10 bandwidth usage (bytes/total in %):
13.4% 9.5% 8.7% 4.8% 3.7% 3.3% 3.0% 2.7% 2.6% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200504221400.pktlen.png)
detailed numbers
[ 16- 31]: 59456
[ 32- 63]: 2553656
[ 64- 127]: 1590808
[ 128- 255]: 173034
[ 256- 511]: 240506
[ 512- 1023]: 354866
[ 1024- 2047]: 1436509
Protocol Breakdown
![[protocol breakdown chart]](200504221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6408835 (100.00%) 2740135933 (100.00%) 427.56
ip 6287203 ( 98.10%) 2736475787 ( 99.87%) 435.25
tcp 5520681 ( 86.14%) 2471548653 ( 90.20%) 447.69
http(s) 1172064 ( 18.29%) 1330296643 ( 48.55%) 1135.00
http(c) 1883313 ( 29.39%) 219793534 ( 8.02%) 116.71
squid 93859 ( 1.46%) 91410210 ( 3.34%) 973.91
smtp 208416 ( 3.25%) 106940394 ( 3.90%) 513.11
nntp 180 ( 0.00%) 14483 ( 0.00%) 80.46
ftp 86648 ( 1.35%) 15652407 ( 0.57%) 180.64
pop3 16307 ( 0.25%) 17323853 ( 0.63%) 1062.36
imap 3479 ( 0.05%) 462602 ( 0.02%) 132.97
telnet 4571 ( 0.07%) 280201 ( 0.01%) 61.30
ssh 1280 ( 0.02%) 227339 ( 0.01%) 177.61
dns 1048 ( 0.02%) 83935 ( 0.00%) 80.09
bgp 136 ( 0.00%) 52340 ( 0.00%) 384.85
napster 1784 ( 0.03%) 199416 ( 0.01%) 111.78
realaud 1093 ( 0.02%) 80870 ( 0.00%) 73.99
rtsp 57066 ( 0.89%) 26428401 ( 0.96%) 463.12
icecast 8721 ( 0.14%) 524843 ( 0.02%) 60.18
other 1958208 ( 30.55%) 661001590 ( 24.12%) 337.55
udp 635443 ( 9.92%) 254197936 ( 9.28%) 400.03
dns 470452 ( 7.34%) 154049623 ( 5.62%) 327.45
realaud 6788 ( 0.11%) 1151913 ( 0.04%) 169.70
everque 11736 ( 0.18%) 12628515 ( 0.46%) 1076.05
quake 1 ( 0.00%) 92 ( 0.00%) 92.00
other 141190 ( 2.20%) 85695130 ( 3.13%) 606.95
icmp 130232 ( 2.03%) 10619091 ( 0.39%) 81.54
ipsec 89 ( 0.00%) 8246 ( 0.00%) 92.65
ip6 694 ( 0.01%) 97186 ( 0.00%) 140.04
other 64 ( 0.00%) 4675 ( 0.00%) 73.05
frag 6640 ( 0.10%) 6659144 ( 0.24%) 1002.88
tcpdump file: 200504221400.dump.gz (175.27 MB)