Traffic Trace Info
DumpFile: 200505151400.dump
FileSize: 265.50MB
Id: 200505151400
StartTime: Sun May 15 14:00:00 2005
EndTime: Sun May 15 14:15:00 2005
TotalTime: 900.73 seconds
TotalCapSize: 207.08MB CapLen: 96 bytes
# of packets: 3828200 (1577.62MB)
AvgRate: 14.69Mbps stddev:1.58M
IP flow (unique src/dst pair) Information
# of flows: 317193 (avg. 12.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 4.3% 3.5% 2.1% 1.7% 1.6% 1.5% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 210681
Top 10 bandwidth usage (bytes/total in %):
15.4% 14.3% 8.9% 7.4% 4.6% 4.4% 4.1% 3.9% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200505151400.pktlen.png)
detailed numbers
[ 16- 31]: 18051
[ 32- 63]: 1418743
[ 64- 127]: 949075
[ 128- 255]: 273555
[ 256- 511]: 135942
[ 512- 1023]: 159279
[ 1024- 2047]: 873555
Protocol Breakdown
![[protocol breakdown chart]](200505151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3828200 (100.00%) 1654250721 (100.00%) 432.12
ip 3793207 ( 99.09%) 1653205256 ( 99.94%) 435.83
tcp 3044173 ( 79.52%) 1464397901 ( 88.52%) 481.05
http(s) 601314 ( 15.71%) 647556896 ( 39.15%) 1076.90
http(c) 856885 ( 22.38%) 84063666 ( 5.08%) 98.10
squid 9272 ( 0.24%) 639516 ( 0.04%) 68.97
smtp 86034 ( 2.25%) 18581245 ( 1.12%) 215.98
nntp 75 ( 0.00%) 4950 ( 0.00%) 66.00
ftp 37821 ( 0.99%) 30232733 ( 1.83%) 799.36
pop3 1186 ( 0.03%) 183254 ( 0.01%) 154.51
imap 907 ( 0.02%) 402351 ( 0.02%) 443.61
telnet 98 ( 0.00%) 7550 ( 0.00%) 77.04
ssh 10771 ( 0.28%) 12814451 ( 0.77%) 1189.72
dns 386 ( 0.01%) 30891 ( 0.00%) 80.03
bgp 123 ( 0.00%) 36439 ( 0.00%) 296.25
napster 254 ( 0.01%) 25888 ( 0.00%) 101.92
realaud 10 ( 0.00%) 1372 ( 0.00%) 137.20
rtsp 5305 ( 0.14%) 5133978 ( 0.31%) 967.76
icecast 11573 ( 0.30%) 747570 ( 0.05%) 64.60
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1414877 ( 36.96%) 663684170 ( 40.12%) 469.08
udp 598603 ( 15.64%) 172154525 ( 10.41%) 287.59
dns 384414 ( 10.04%) 95098160 ( 5.75%) 247.38
realaud 5788 ( 0.15%) 3160678 ( 0.19%) 546.07
halflif 2 ( 0.00%) 652 ( 0.00%) 326.00
quake 1 ( 0.00%) 83 ( 0.00%) 83.00
other 205711 ( 5.37%) 73493057 ( 4.44%) 357.26
icmp 101592 ( 2.65%) 8953204 ( 0.54%) 88.13
ipsec 89 ( 0.00%) 8366 ( 0.00%) 94.00
ip6 391 ( 0.01%) 60573 ( 0.00%) 154.92
other 48359 ( 1.26%) 7630687 ( 0.46%) 157.79
frag 7209 ( 0.19%) 10290192 ( 0.62%) 1427.41
tcpdump file: 200505151400.dump.gz (99.60 MB)