Traffic Trace Info
DumpFile: 200509131400.dump
FileSize: 500.85MB
Id: 200509131400
StartTime: Tue Sep 13 14:00:01 2005
EndTime: Tue Sep 13 14:15:00 2005
TotalTime: 899.87 seconds
TotalCapSize: 389.27MB CapLen: 96 bytes
# of packets: 7312442 (3073.99MB)
AvgRate: 28.66Mbps stddev:1.38M
IP flow (unique src/dst pair) Information
# of flows: 551026 (avg. 13.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 5.1% 2.1% 1.6% 1.5% 1.5% 1.3% 1.1% 1.1% 0.7%
IP address Information
# of IPv4 addresses: 404648
Top 10 bandwidth usage (bytes/total in %):
11.5% 10.9% 10.1% 7.0% 5.1% 5.1% 4.8% 3.6% 3.3% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509131400.pktlen.png)
detailed numbers
[ 16- 31]: 86030
[ 32- 63]: 2614048
[ 64- 127]: 1968671
[ 128- 255]: 321930
[ 256- 511]: 312579
[ 512- 1023]: 281221
[ 1024- 2047]: 1727963
Protocol Breakdown
![[protocol breakdown chart]](200509131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7312442 (100.00%) 3223308320 (100.00%) 440.80
ip 7120080 ( 97.37%) 3217459715 ( 99.82%) 451.89
tcp 5809346 ( 79.44%) 2902012067 ( 90.03%) 499.54
http(s) 1311479 ( 17.93%) 1260663240 ( 39.11%) 961.25
http(c) 1949332 ( 26.66%) 223930616 ( 6.95%) 114.88
squid 899 ( 0.01%) 96539 ( 0.00%) 107.38
smtp 152885 ( 2.09%) 62303026 ( 1.93%) 407.52
nntp 119 ( 0.00%) 9081 ( 0.00%) 76.31
ftp 42186 ( 0.58%) 25003748 ( 0.78%) 592.70
pop3 12978 ( 0.18%) 1740384 ( 0.05%) 134.10
imap 2776 ( 0.04%) 429133 ( 0.01%) 154.59
telnet 5320 ( 0.07%) 816567 ( 0.03%) 153.49
ssh 57799 ( 0.79%) 30845382 ( 0.96%) 533.67
dns 1036 ( 0.01%) 65757 ( 0.00%) 63.47
bgp 200 ( 0.00%) 102899 ( 0.00%) 514.50
napster 1233 ( 0.02%) 347531 ( 0.01%) 281.86
realaud 5107 ( 0.07%) 325255 ( 0.01%) 63.69
rtsp 40744 ( 0.56%) 49189138 ( 1.53%) 1207.27
icecast 6594 ( 0.09%) 672226 ( 0.02%) 101.95
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 2181248 ( 29.83%) 1244185312 ( 38.60%) 570.40
udp 922839 ( 12.62%) 285697126 ( 8.86%) 309.59
dns 478973 ( 6.55%) 119589086 ( 3.71%) 249.68
realaud 897 ( 0.01%) 75060 ( 0.00%) 83.68
halflif 37344 ( 0.51%) 5101697 ( 0.16%) 136.61
everque 3 ( 0.00%) 283 ( 0.00%) 94.33
unreal 1 ( 0.00%) 249 ( 0.00%) 249.00
quake 2 ( 0.00%) 151 ( 0.00%) 75.50
cuseeme 1 ( 0.00%) 91 ( 0.00%) 91.00
other 398060 ( 5.44%) 160664157 ( 4.98%) 403.62
icmp 357852 ( 4.89%) 24417790 ( 0.76%) 68.23
ipsec 1 ( 0.00%) 82 ( 0.00%) 82.00
ip6 204 ( 0.00%) 20209 ( 0.00%) 99.06
other 29838 ( 0.41%) 5312441 ( 0.16%) 178.04
frag 7667 ( 0.10%) 10840876 ( 0.34%) 1413.97
tcpdump file: 200509131400.dump.gz (196.25 MB)