Traffic Trace Info
DumpFile: 200505281400.dump
FileSize: 340.85MB
Id: 200505281400
StartTime: Sat May 28 14:00:01 2005
EndTime: Sat May 28 14:15:00 2005
TotalTime: 899.48 seconds
TotalCapSize: 263.90MB CapLen: 96 bytes
# of packets: 5042645 (2376.61MB)
AvgRate: 22.16Mbps stddev:1.16M
IP flow (unique src/dst pair) Information
# of flows: 300819 (avg. 16.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 4.5% 4.4% 3.1% 2.8% 2.8% 2.1% 1.2% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 233000
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.2% 9.9% 9.5% 9.5% 6.1% 6.0% 4.6% 4.5% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200505281400.pktlen.png)
detailed numbers
[ 16- 31]: 41391
[ 32- 63]: 1604325
[ 64- 127]: 1279520
[ 128- 255]: 272323
[ 256- 511]: 255065
[ 512- 1023]: 245600
[ 1024- 2047]: 1344421
Protocol Breakdown
![[protocol breakdown chart]](200505281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5042645 (100.00%) 2492059322 (100.00%) 494.20
ip 4959366 ( 98.35%) 2489557282 ( 99.90%) 501.99
tcp 3809139 ( 75.54%) 2020952431 ( 81.10%) 530.55
http(s) 892826 ( 17.71%) 958661909 ( 38.47%) 1073.74
http(c) 1208093 ( 23.96%) 133454814 ( 5.36%) 110.47
squid 1069 ( 0.02%) 288038 ( 0.01%) 269.45
smtp 138732 ( 2.75%) 44819202 ( 1.80%) 323.06
nntp 103 ( 0.00%) 7405 ( 0.00%) 71.89
ftp 61077 ( 1.21%) 18741409 ( 0.75%) 306.85
pop3 1672 ( 0.03%) 349848 ( 0.01%) 209.24
imap 526 ( 0.01%) 49316 ( 0.00%) 93.76
telnet 910 ( 0.02%) 88321 ( 0.00%) 97.06
ssh 4406 ( 0.09%) 353432 ( 0.01%) 80.22
dns 647 ( 0.01%) 51000 ( 0.00%) 78.83
bgp 131 ( 0.00%) 49621 ( 0.00%) 378.79
napster 12923 ( 0.26%) 808486 ( 0.03%) 62.56
realaud 1701 ( 0.03%) 108523 ( 0.00%) 63.80
rtsp 3386 ( 0.07%) 397337 ( 0.02%) 117.35
icecast 6098 ( 0.12%) 372162 ( 0.01%) 61.03
hotline 15 ( 0.00%) 1417 ( 0.00%) 94.47
other 1460254 ( 28.96%) 861848095 ( 34.58%) 590.20
udp 767907 ( 15.23%) 415980617 ( 16.69%) 541.71
dns 350395 ( 6.95%) 114301766 ( 4.59%) 326.21
realaud 5801 ( 0.12%) 2216080 ( 0.09%) 382.02
halflif 12 ( 0.00%) 5016 ( 0.00%) 418.00
everque 1 ( 0.00%) 390 ( 0.00%) 390.00
other 385896 ( 7.65%) 279728309 ( 11.22%) 724.88
icmp 84248 ( 1.67%) 7080983 ( 0.28%) 84.05
ipsec 89 ( 0.00%) 8308 ( 0.00%) 93.35
ip6 409 ( 0.01%) 61982 ( 0.00%) 151.55
other 297574 ( 5.90%) 45472961 ( 1.82%) 152.81
frag 196314 ( 3.89%) 236639976 ( 9.50%) 1205.42
tcpdump file: 200505281400.dump.gz (130.06 MB)