Traffic Trace Info
DumpFile: 200511091400.dump
FileSize: 564.36MB
Id: 200511091400
StartTime: Wed Nov 9 14:00:01 2005
EndTime: Wed Nov 9 14:15:01 2005
TotalTime: 900.01 seconds
TotalCapSize: 439.24MB CapLen: 96 bytes
# of packets: 8199634 (3392.13MB)
AvgRate: 31.62Mbps stddev:0.40M
IP flow (unique src/dst pair) Information
# of flows: 631553 (avg. 12.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.9% 1.3% 1.2% 0.9% 0.9% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 478048
Top 10 bandwidth usage (bytes/total in %):
15.5% 4.7% 4.1% 3.9% 3.3% 2.9% 2.8% 2.6% 2.5% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200511091400.pktlen.png)
detailed numbers
[ 16- 31]: 104040
[ 32- 63]: 2914023
[ 64- 127]: 2269450
[ 128- 255]: 367053
[ 256- 511]: 323259
[ 512- 1023]: 302511
[ 1024- 2047]: 1919298
Protocol Breakdown
![[protocol breakdown chart]](200511091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8199634 (100.00%) 3556910485 (100.00%) 433.79
ip 7980474 ( 97.33%) 3550286245 ( 99.81%) 444.87
tcp 6799081 ( 82.92%) 3240795553 ( 91.11%) 476.65
http(s) 1484489 ( 18.10%) 1738751333 ( 48.88%) 1171.28
http(c) 2247747 ( 27.41%) 249853995 ( 7.02%) 111.16
squid 8378 ( 0.10%) 1080041 ( 0.03%) 128.91
smtp 250785 ( 3.06%) 78050929 ( 2.19%) 311.23
nntp 15 ( 0.00%) 900 ( 0.00%) 60.00
ftp 34869 ( 0.43%) 2998056 ( 0.08%) 85.98
pop3 4042 ( 0.05%) 794583 ( 0.02%) 196.58
imap 5436 ( 0.07%) 2621169 ( 0.07%) 482.19
telnet 1022 ( 0.01%) 114831 ( 0.00%) 112.36
ssh 13499 ( 0.16%) 7809690 ( 0.22%) 578.54
dns 2326 ( 0.03%) 151571 ( 0.00%) 65.16
bgp 250 ( 0.00%) 138791 ( 0.00%) 555.16
napster 707 ( 0.01%) 481917 ( 0.01%) 681.64
rtsp 20692 ( 0.25%) 1502808 ( 0.04%) 72.63
icecast 18452 ( 0.23%) 2560684 ( 0.07%) 138.78
hotline 6 ( 0.00%) 360 ( 0.00%) 60.00
other 2666956 ( 32.53%) 1152526269 ( 32.40%) 432.15
udp 955477 ( 11.65%) 279366666 ( 7.85%) 292.38
dns 473896 ( 5.78%) 115105040 ( 3.24%) 242.89
realaud 2665 ( 0.03%) 182367 ( 0.01%) 68.43
halflif 3 ( 0.00%) 417 ( 0.00%) 139.00
everque 121 ( 0.00%) 11627 ( 0.00%) 96.09
unreal 5 ( 0.00%) 468 ( 0.00%) 93.60
quake 5 ( 0.00%) 608 ( 0.00%) 121.60
other 466059 ( 5.68%) 163489358 ( 4.60%) 350.79
icmp 141189 ( 1.72%) 13438718 ( 0.38%) 95.18
ip6 177 ( 0.00%) 18530 ( 0.00%) 104.69
other 84550 ( 1.03%) 16666778 ( 0.47%) 197.12
frag 10044 ( 0.12%) 6369810 ( 0.18%) 634.19
tcpdump file: 200511091400.dump.gz (236.51 MB)