Traffic Trace Info
DumpFile: 200505081400.dump
FileSize: 352.20MB
Id: 200505081400
StartTime: Sun May 8 14:00:00 2005
EndTime: Sun May 8 14:15:00 2005
TotalTime: 900.12 seconds
TotalCapSize: 275.09MB CapLen: 96 bytes
# of packets: 5053539 (2079.57MB)
AvgRate: 19.38Mbps stddev:1.21M
IP flow (unique src/dst pair) Information
# of flows: 312949 (avg. 16.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 7.0% 4.1% 3.8% 1.9% 1.6% 1.4% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 223055
Top 10 bandwidth usage (bytes/total in %):
17.5% 16.8% 7.5% 7.0% 7.0% 5.8% 4.2% 4.1% 4.0% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200505081400.pktlen.png)
detailed numbers
[ 16- 31]: 36087
[ 32- 63]: 1806034
[ 64- 127]: 1509096
[ 128- 255]: 167637
[ 256- 511]: 198522
[ 512- 1023]: 157614
[ 1024- 2047]: 1178549
Protocol Breakdown
![[protocol breakdown chart]](200505081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5053539 (100.00%) 2180589695 (100.00%) 431.50
ip 4981793 ( 98.58%) 2178433463 ( 99.90%) 437.28
tcp 4192144 ( 82.95%) 1954539356 ( 89.63%) 466.24
http(s) 738305 ( 14.61%) 830896393 ( 38.10%) 1125.41
http(c) 966173 ( 19.12%) 96291354 ( 4.42%) 99.66
squid 3865 ( 0.08%) 1919872 ( 0.09%) 496.73
smtp 158289 ( 3.13%) 38232345 ( 1.75%) 241.54
nntp 97 ( 0.00%) 7082 ( 0.00%) 73.01
ftp 92598 ( 1.83%) 15893113 ( 0.73%) 171.64
pop3 1918 ( 0.04%) 146922 ( 0.01%) 76.60
imap 339 ( 0.01%) 42016 ( 0.00%) 123.94
telnet 229 ( 0.00%) 22237 ( 0.00%) 97.10
ssh 243 ( 0.00%) 34576 ( 0.00%) 142.29
dns 433 ( 0.01%) 30876 ( 0.00%) 71.31
bgp 124 ( 0.00%) 34455 ( 0.00%) 277.86
napster 14 ( 0.00%) 911 ( 0.00%) 65.07
realaud 3 ( 0.00%) 184 ( 0.00%) 61.33
rtsp 14800 ( 0.29%) 15206450 ( 0.70%) 1027.46
icecast 21350 ( 0.42%) 3078807 ( 0.14%) 144.21
other 2184400 ( 43.23%) 952392931 ( 43.68%) 436.00
udp 538223 ( 10.65%) 195220679 ( 8.95%) 362.71
dns 373450 ( 7.39%) 104173396 ( 4.78%) 278.95
realaud 979 ( 0.02%) 85562 ( 0.00%) 87.40
halflif 2 ( 0.00%) 158 ( 0.00%) 79.00
everque 2 ( 0.00%) 120 ( 0.00%) 60.00
other 161163 ( 3.19%) 89924524 ( 4.12%) 557.97
icmp 104322 ( 2.06%) 8820365 ( 0.40%) 84.55
ipsec 89 ( 0.00%) 8366 ( 0.00%) 94.00
ip6 424 ( 0.01%) 63596 ( 0.00%) 149.99
other 146591 ( 2.90%) 19781101 ( 0.91%) 134.94
frag 9988 ( 0.20%) 13700410 ( 0.63%) 1371.69
tcpdump file: 200505081400.dump.gz (134.20 MB)