Traffic Trace Info
DumpFile: 200511191400.dump
FileSize: 463.85MB
Id: 200511191400
StartTime: Sat Nov 19 14:00:00 2005
EndTime: Sat Nov 19 14:15:01 2005
TotalTime: 900.18 seconds
TotalCapSize: 360.78MB CapLen: 96 bytes
# of packets: 6754908 (3208.41MB)
AvgRate: 29.90Mbps stddev:1.00M
IP flow (unique src/dst pair) Information
# of flows: 495793 (avg. 13.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.6% 1.6% 1.5% 1.3% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 348287
Top 10 bandwidth usage (bytes/total in %):
14.8% 7.2% 6.2% 5.3% 4.6% 4.6% 4.5% 4.3% 3.8% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200511191400.pktlen.png)
detailed numbers
[ 16- 31]: 77121
[ 32- 63]: 1939055
[ 64- 127]: 1956308
[ 128- 255]: 340530
[ 256- 511]: 315478
[ 512- 1023]: 267850
[ 1024- 2047]: 1858566
Protocol Breakdown
![[protocol breakdown chart]](200511191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6754908 (100.00%) 3364261561 (100.00%) 498.05
ip 6590749 ( 97.57%) 3359297918 ( 99.85%) 509.70
tcp 5310838 ( 78.62%) 3007106107 ( 89.38%) 566.22
http(s) 1253940 ( 18.56%) 1498673300 ( 44.55%) 1195.17
http(c) 1310926 ( 19.41%) 142611965 ( 4.24%) 108.79
squid 56080 ( 0.83%) 7918296 ( 0.24%) 141.20
smtp 238614 ( 3.53%) 80365444 ( 2.39%) 336.80
nntp 9 ( 0.00%) 546 ( 0.00%) 60.67
ftp 52822 ( 0.78%) 28953136 ( 0.86%) 548.13
pop3 1979 ( 0.03%) 497625 ( 0.01%) 251.45
imap 2245 ( 0.03%) 1003300 ( 0.03%) 446.90
telnet 908 ( 0.01%) 183990 ( 0.01%) 202.63
ssh 9131 ( 0.14%) 5142757 ( 0.15%) 563.22
dns 2583 ( 0.04%) 168542 ( 0.01%) 65.25
bgp 616 ( 0.01%) 398357 ( 0.01%) 646.68
rtsp 16970 ( 0.25%) 11879807 ( 0.35%) 700.05
icecast 7467 ( 0.11%) 458404 ( 0.01%) 61.39
other 2323904 ( 34.40%) 1227727368 ( 36.49%) 528.30
udp 1065126 ( 15.77%) 326259353 ( 9.70%) 306.31
dns 513104 ( 7.60%) 123488712 ( 3.67%) 240.67
realaud 12465 ( 0.18%) 7453882 ( 0.22%) 597.98
halflif 44914 ( 0.66%) 6321336 ( 0.19%) 140.74
starcra 2 ( 0.00%) 197 ( 0.00%) 98.50
everque 38 ( 0.00%) 3739 ( 0.00%) 98.39
unreal 4 ( 0.00%) 537 ( 0.00%) 134.25
quake 5 ( 0.00%) 310 ( 0.00%) 62.00
other 474263 ( 7.02%) 187445832 ( 5.57%) 395.24
icmp 151963 ( 2.25%) 13583860 ( 0.40%) 89.39
ip6 197 ( 0.00%) 20866 ( 0.00%) 105.92
other 62625 ( 0.93%) 12327732 ( 0.37%) 196.85
frag 23926 ( 0.35%) 17499036 ( 0.52%) 731.38
tcpdump file: 200511191400.dump.gz (189.72 MB)