Traffic Trace Info
DumpFile: 200508171400.dump
FileSize: 493.01MB
Id: 200508171400
StartTime: Wed Aug 17 14:00:00 2005
EndTime: Wed Aug 17 14:15:00 2005
TotalTime: 900.00 seconds
TotalCapSize: 383.60MB CapLen: 96 bytes
# of packets: 7170065 (2609.56MB)
AvgRate: 24.32Mbps stddev:1.76M
IP flow (unique src/dst pair) Information
# of flows: 580775 (avg. 12.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.5% 2.3% 2.1% 1.5% 1.2% 1.2% 1.1% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 427413
Top 10 bandwidth usage (bytes/total in %):
23.2% 8.6% 5.1% 3.4% 3.2% 2.8% 2.5% 2.4% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200508171400.pktlen.png)
detailed numbers
[ 16- 31]: 69269
[ 32- 63]: 2588075
[ 64- 127]: 2041071
[ 128- 255]: 373547
[ 256- 511]: 349146
[ 512- 1023]: 422219
[ 1024- 2047]: 1326738
Protocol Breakdown
![[protocol breakdown chart]](200508171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7170065 (100.00%) 2736317363 (100.00%) 381.63
ip 7025922 ( 97.99%) 2731964044 ( 99.84%) 388.84
tcp 5585937 ( 77.91%) 2411824205 ( 88.14%) 431.77
http(s) 684395 ( 9.55%) 693954064 ( 25.36%) 1013.97
http(c) 1464010 ( 20.42%) 211602805 ( 7.73%) 144.54
squid 2081 ( 0.03%) 325419 ( 0.01%) 156.38
smtp 115525 ( 1.61%) 40702271 ( 1.49%) 352.32
nntp 108 ( 0.00%) 7741 ( 0.00%) 71.68
ftp 138061 ( 1.93%) 44943067 ( 1.64%) 325.53
pop3 50089 ( 0.70%) 71890746 ( 2.63%) 1435.26
imap 139795 ( 1.95%) 8814498 ( 0.32%) 63.05
telnet 999 ( 0.01%) 147950 ( 0.01%) 148.10
ssh 7612 ( 0.11%) 887292 ( 0.03%) 116.56
dns 1050 ( 0.01%) 77368 ( 0.00%) 73.68
bgp 254 ( 0.00%) 144472 ( 0.01%) 568.79
napster 23770 ( 0.33%) 6897001 ( 0.25%) 290.16
rtsp 82032 ( 1.14%) 28452368 ( 1.04%) 346.84
icecast 13445 ( 0.19%) 3998467 ( 0.15%) 297.39
other 2843199 ( 39.65%) 1298306445 ( 47.45%) 456.64
udp 1146460 ( 15.99%) 299290063 ( 10.94%) 261.06
dns 618617 ( 8.63%) 143115391 ( 5.23%) 231.35
realaud 10479 ( 0.15%) 4714530 ( 0.17%) 449.90
halflif 10 ( 0.00%) 1118 ( 0.00%) 111.80
starcra 1 ( 0.00%) 100 ( 0.00%) 100.00
everque 116 ( 0.00%) 12289 ( 0.00%) 105.94
unreal 20 ( 0.00%) 3153 ( 0.00%) 157.65
quake 2 ( 0.00%) 199 ( 0.00%) 99.50
cuseeme 1 ( 0.00%) 92 ( 0.00%) 92.00
other 511042 ( 7.13%) 151230727 ( 5.53%) 295.93
icmp 289746 ( 4.04%) 20292211 ( 0.74%) 70.03
ipsec 86 ( 0.00%) 8084 ( 0.00%) 94.00
ip6 676 ( 0.01%) 89770 ( 0.00%) 132.80
other 3017 ( 0.04%) 459711 ( 0.02%) 152.37
frag 15 ( 0.00%) 900 ( 0.00%) 60.00
tcpdump file: 200508171400.dump.gz (194.46 MB)