Traffic Trace Info
DumpFile: 200508121400.dump
FileSize: 426.58MB
Id: 200508121400
StartTime: Fri Aug 12 14:00:00 2005
EndTime: Fri Aug 12 14:15:00 2005
TotalTime: 899.47 seconds
TotalCapSize: 332.04MB CapLen: 96 bytes
# of packets: 6195639 (2500.57MB)
AvgRate: 23.32Mbps stddev:1.54M
IP flow (unique src/dst pair) Information
# of flows: 466787 (avg. 13.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 1.2% 1.0% 0.8% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 333771
Top 10 bandwidth usage (bytes/total in %):
21.3% 8.7% 7.9% 6.4% 5.4% 4.1% 4.1% 3.0% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200508121400.pktlen.png)
detailed numbers
[ 16- 31]: 55740
[ 32- 63]: 1993573
[ 64- 127]: 1805140
[ 128- 255]: 347853
[ 256- 511]: 363765
[ 512- 1023]: 287032
[ 1024- 2047]: 1342536
Protocol Breakdown
![[protocol breakdown chart]](200508121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6195639 (100.00%) 2622040503 (100.00%) 423.21
ip 6079085 ( 98.12%) 2618517555 ( 99.87%) 430.74
tcp 4831225 ( 77.98%) 2319442286 ( 88.46%) 480.09
http(s) 706170 ( 11.40%) 694841073 ( 26.50%) 983.96
http(c) 1285967 ( 20.76%) 178312177 ( 6.80%) 138.66
squid 5262 ( 0.08%) 4162442 ( 0.16%) 791.04
smtp 152270 ( 2.46%) 72214888 ( 2.75%) 474.26
nntp 269 ( 0.00%) 19532 ( 0.00%) 72.61
ftp 137839 ( 2.22%) 62349348 ( 2.38%) 452.33
pop3 3675 ( 0.06%) 1060759 ( 0.04%) 288.64
imap 3347 ( 0.05%) 1591733 ( 0.06%) 475.57
telnet 1284 ( 0.02%) 157194 ( 0.01%) 122.43
ssh 8116 ( 0.13%) 3732396 ( 0.14%) 459.88
dns 578 ( 0.01%) 37442 ( 0.00%) 64.78
bgp 364 ( 0.01%) 227332 ( 0.01%) 624.54
napster 8 ( 0.00%) 530 ( 0.00%) 66.25
realaud 264 ( 0.00%) 183743 ( 0.01%) 696.00
rtsp 12938 ( 0.21%) 940306 ( 0.04%) 72.68
icecast 25609 ( 0.41%) 15162321 ( 0.58%) 592.07
other 2471274 ( 39.89%) 1283898329 ( 48.97%) 519.53
udp 1039439 ( 16.78%) 279819436 ( 10.67%) 269.20
dns 681644 ( 11.00%) 161676024 ( 6.17%) 237.19
realaud 6139 ( 0.10%) 1709990 ( 0.07%) 278.55
halflif 10 ( 0.00%) 1586 ( 0.00%) 158.60
everque 14 ( 0.00%) 1901 ( 0.00%) 135.79
unreal 4 ( 0.00%) 495 ( 0.00%) 123.75
quake 3 ( 0.00%) 412 ( 0.00%) 137.33
other 346533 ( 5.59%) 116253707 ( 4.43%) 335.48
icmp 149777 ( 2.42%) 12211761 ( 0.47%) 81.53
ipsec 87 ( 0.00%) 8178 ( 0.00%) 94.00
ip6 1338 ( 0.02%) 173626 ( 0.01%) 129.77
other 57219 ( 0.92%) 6862268 ( 0.26%) 119.93
frag 14 ( 0.00%) 840 ( 0.00%) 60.00
tcpdump file: 200508121400.dump.gz (174.63 MB)