Traffic Trace Info
DumpFile: 200509151400.dump
FileSize: 523.38MB
Id: 200509151400
StartTime: Thu Sep 15 14:00:00 2005
EndTime: Thu Sep 15 14:15:01 2005
TotalTime: 900.32 seconds
TotalCapSize: 407.09MB CapLen: 96 bytes
# of packets: 7620766 (3249.94MB)
AvgRate: 30.28Mbps stddev:0.80M
IP flow (unique src/dst pair) Information
# of flows: 536465 (avg. 14.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.4% 1.3% 1.3% 1.3% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 403594
Top 10 bandwidth usage (bytes/total in %):
17.2% 11.1% 10.6% 4.3% 2.9% 2.9% 2.7% 2.2% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509151400.pktlen.png)
detailed numbers
[ 16- 31]: 93791
[ 32- 63]: 2748586
[ 64- 127]: 2018431
[ 128- 255]: 307201
[ 256- 511]: 339821
[ 512- 1023]: 283846
[ 1024- 2047]: 1829090
Protocol Breakdown
![[protocol breakdown chart]](200509151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7620766 (100.00%) 3407804049 (100.00%) 447.17
ip 7415248 ( 97.30%) 3401567604 ( 99.82%) 458.73
tcp 6268954 ( 82.26%) 3097879900 ( 90.91%) 494.16
http(s) 1304851 ( 17.12%) 1314600599 ( 38.58%) 1007.47
http(c) 1607552 ( 21.09%) 211247699 ( 6.20%) 131.41
squid 19374 ( 0.25%) 15493538 ( 0.45%) 799.71
smtp 198989 ( 2.61%) 77255936 ( 2.27%) 388.24
nntp 189 ( 0.00%) 16789 ( 0.00%) 88.83
ftp 88211 ( 1.16%) 41045847 ( 1.20%) 465.31
pop3 3534 ( 0.05%) 941404 ( 0.03%) 266.38
imap 4396 ( 0.06%) 2857978 ( 0.08%) 650.13
telnet 2325 ( 0.03%) 235326 ( 0.01%) 101.22
ssh 20535 ( 0.27%) 9764705 ( 0.29%) 475.52
dns 995 ( 0.01%) 63413 ( 0.00%) 63.73
bgp 243 ( 0.00%) 132928 ( 0.00%) 547.03
napster 24476 ( 0.32%) 9964116 ( 0.29%) 407.10
realaud 4107 ( 0.05%) 277872 ( 0.01%) 67.66
rtsp 9469 ( 0.12%) 6033928 ( 0.18%) 637.23
icecast 11605 ( 0.15%) 8341852 ( 0.24%) 718.82
hotline 8 ( 0.00%) 1003 ( 0.00%) 125.38
other 2927652 ( 38.42%) 1398213771 ( 41.03%) 477.59
udp 816164 ( 10.71%) 248961278 ( 7.31%) 305.04
dns 523886 ( 6.87%) 125933555 ( 3.70%) 240.38
realaud 1403 ( 0.02%) 104700 ( 0.00%) 74.63
halflif 3 ( 0.00%) 312 ( 0.00%) 104.00
everque 3 ( 0.00%) 267 ( 0.00%) 89.00
quake 1 ( 0.00%) 77 ( 0.00%) 77.00
other 284328 ( 3.73%) 122697502 ( 3.60%) 431.54
icmp 227361 ( 2.98%) 16703967 ( 0.49%) 73.47
ipsec 15 ( 0.00%) 1530 ( 0.00%) 102.00
ip6 163 ( 0.00%) 16990 ( 0.00%) 104.23
other 102591 ( 1.35%) 38003939 ( 1.12%) 370.44
frag 53 ( 0.00%) 21886 ( 0.00%) 412.94
tcpdump file: 200509151400.dump.gz (211.00 MB)