Traffic Trace Info
DumpFile: 200508201400.dump
FileSize: 371.43MB
Id: 200508201400
StartTime: Sat Aug 20 14:00:01 2005
EndTime: Sat Aug 20 14:15:00 2005
TotalTime: 899.72 seconds
TotalCapSize: 288.47MB CapLen: 96 bytes
# of packets: 5436997 (2518.55MB)
AvgRate: 23.48Mbps stddev:1.58M
IP flow (unique src/dst pair) Information
# of flows: 400934 (avg. 13.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 1.9% 1.9% 1.6% 1.4% 1.4% 1.3% 1.3% 1.1% 0.8%
IP address Information
# of IPv4 addresses: 282706
Top 10 bandwidth usage (bytes/total in %):
17.4% 10.7% 5.7% 5.1% 4.4% 3.9% 3.9% 3.5% 3.3% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200508201400.pktlen.png)
detailed numbers
[ 16- 31]: 46426
[ 32- 63]: 1574502
[ 64- 127]: 1499537
[ 128- 255]: 315203
[ 256- 511]: 310963
[ 512- 1023]: 281915
[ 1024- 2047]: 1408451
Protocol Breakdown
![[protocol breakdown chart]](200508201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5436997 (100.00%) 2640895153 (100.00%) 485.73
ip 5339575 ( 98.21%) 2637950175 ( 99.89%) 494.04
tcp 4111271 ( 75.62%) 2316882672 ( 87.73%) 563.54
http(s) 919818 ( 16.92%) 1025469988 ( 38.83%) 1114.86
http(c) 969931 ( 17.84%) 120990936 ( 4.58%) 124.74
squid 6308 ( 0.12%) 412555 ( 0.02%) 65.40
smtp 109319 ( 2.01%) 52209262 ( 1.98%) 477.59
nntp 405 ( 0.01%) 51772 ( 0.00%) 127.83
ftp 58990 ( 1.08%) 27154351 ( 1.03%) 460.32
pop3 1466 ( 0.03%) 200689 ( 0.01%) 136.90
imap 557 ( 0.01%) 65626 ( 0.00%) 117.82
telnet 771 ( 0.01%) 88356 ( 0.00%) 114.60
ssh 29370 ( 0.54%) 16254335 ( 0.62%) 553.43
dns 894 ( 0.02%) 66915 ( 0.00%) 74.85
bgp 404 ( 0.01%) 257243 ( 0.01%) 636.74
napster 90 ( 0.00%) 6208 ( 0.00%) 68.98
realaud 12 ( 0.00%) 1809 ( 0.00%) 150.75
rtsp 8730 ( 0.16%) 4392122 ( 0.17%) 503.11
icecast 11695 ( 0.22%) 4501289 ( 0.17%) 384.89
other 1975943 ( 36.34%) 1064188956 ( 40.30%) 538.57
udp 930975 ( 17.12%) 271238738 ( 10.27%) 291.35
dns 507502 ( 9.33%) 118282203 ( 4.48%) 233.07
realaud 4 ( 0.00%) 439 ( 0.00%) 109.75
everque 1 ( 0.00%) 314 ( 0.00%) 314.00
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 77 ( 0.00%) 77.00
cuseeme 2 ( 0.00%) 155 ( 0.00%) 77.50
other 418628 ( 7.70%) 152788999 ( 5.79%) 364.98
icmp 153139 ( 2.82%) 11956393 ( 0.45%) 78.08
ipsec 89 ( 0.00%) 8246 ( 0.00%) 92.65
ip6 566 ( 0.01%) 58046 ( 0.00%) 102.55
other 143535 ( 2.64%) 37806080 ( 1.43%) 263.39
frag 9 ( 0.00%) 540 ( 0.00%) 60.00
tcpdump file: 200508201400.dump.gz (146.52 MB)