Traffic Trace Info
DumpFile: 200509171400.dump
FileSize: 441.58MB
Id: 200509171400
StartTime: Sat Sep 17 14:00:00 2005
EndTime: Sat Sep 17 14:15:00 2005
TotalTime: 900.17 seconds
TotalCapSize: 342.96MB CapLen: 96 bytes
# of packets: 6463210 (3085.47MB)
AvgRate: 28.75Mbps stddev:1.22M
IP flow (unique src/dst pair) Information
# of flows: 361101 (avg. 17.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 2.0% 1.8% 1.8% 1.6% 1.4% 1.3% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 253693
Top 10 bandwidth usage (bytes/total in %):
10.9% 9.9% 9.4% 8.2% 6.3% 6.2% 3.8% 3.7% 3.3% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509171400.pktlen.png)
detailed numbers
[ 16- 31]: 71020
[ 32- 63]: 2107483
[ 64- 127]: 1633537
[ 128- 255]: 285641
[ 256- 511]: 298657
[ 512- 1023]: 271169
[ 1024- 2047]: 1795703
Protocol Breakdown
![[protocol breakdown chart]](200509171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6463210 (100.00%) 3235350959 (100.00%) 500.58
ip 6309364 ( 97.62%) 3230688046 ( 99.86%) 512.05
tcp 5303082 ( 82.05%) 2933021337 ( 90.66%) 553.08
http(s) 1134587 ( 17.55%) 1309660534 ( 40.48%) 1154.31
http(c) 1226286 ( 18.97%) 134999983 ( 4.17%) 110.09
squid 4354 ( 0.07%) 1056285 ( 0.03%) 242.60
smtp 172817 ( 2.67%) 72727097 ( 2.25%) 420.83
nntp 372 ( 0.01%) 29827 ( 0.00%) 80.18
ftp 26597 ( 0.41%) 7335365 ( 0.23%) 275.80
pop3 4558 ( 0.07%) 2543510 ( 0.08%) 558.03
imap 1968 ( 0.03%) 1495066 ( 0.05%) 759.69
telnet 1739 ( 0.03%) 190639 ( 0.01%) 109.63
ssh 14930 ( 0.23%) 7002250 ( 0.22%) 469.01
dns 1431 ( 0.02%) 424716 ( 0.01%) 296.80
bgp 391 ( 0.01%) 261612 ( 0.01%) 669.08
napster 692 ( 0.01%) 66011 ( 0.00%) 95.39
realaud 102 ( 0.00%) 48984 ( 0.00%) 480.24
rtsp 19082 ( 0.30%) 1273117 ( 0.04%) 66.72
icecast 379 ( 0.01%) 75613 ( 0.00%) 199.51
other 2661835 ( 41.18%) 1392764724 ( 43.05%) 523.23
udp 770824 ( 11.93%) 261930160 ( 8.10%) 339.81
dns 418807 ( 6.48%) 105428496 ( 3.26%) 251.74
realaud 60178 ( 0.93%) 42350762 ( 1.31%) 703.76
halflif 1 ( 0.00%) 86 ( 0.00%) 86.00
starcra 2 ( 0.00%) 320 ( 0.00%) 160.00
everque 10 ( 0.00%) 1172 ( 0.00%) 117.20
unreal 3 ( 0.00%) 444 ( 0.00%) 148.00
quake 1 ( 0.00%) 70 ( 0.00%) 70.00
other 286916 ( 4.44%) 113980039 ( 3.52%) 397.26
icmp 152670 ( 2.36%) 11845279 ( 0.37%) 77.59
ip6 172 ( 0.00%) 17600 ( 0.00%) 102.33
other 82616 ( 1.28%) 23873670 ( 0.74%) 288.97
frag 77 ( 0.00%) 11865 ( 0.00%) 154.09
tcpdump file: 200509171400.dump.gz (178.41 MB)