Traffic Trace Info
DumpFile: 200511201400.dump
FileSize: 473.45MB
Id: 200511201400
StartTime: Sun Nov 20 14:00:01 2005
EndTime: Sun Nov 20 14:15:00 2005
TotalTime: 899.76 seconds
TotalCapSize: 370.03MB CapLen: 96 bytes
# of packets: 6777461 (2944.87MB)
AvgRate: 27.46Mbps stddev:1.39M
IP flow (unique src/dst pair) Information
# of flows: 427526 (avg. 15.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.5% 1.8% 1.7% 1.6% 1.4% 1.3% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 298838
Top 10 bandwidth usage (bytes/total in %):
15.6% 12.0% 6.8% 5.0% 4.1% 4.1% 4.0% 3.3% 3.1% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200511201400.pktlen.png)
detailed numbers
[ 16- 31]: 66068
[ 32- 63]: 1759823
[ 64- 127]: 2333315
[ 128- 255]: 419989
[ 256- 511]: 333484
[ 512- 1023]: 179315
[ 1024- 2047]: 1685467
Protocol Breakdown
![[protocol breakdown chart]](200511201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6777461 (100.00%) 3087917671 (100.00%) 455.62
ip 6640244 ( 97.98%) 3083777414 ( 99.87%) 464.41
tcp 5445872 ( 80.35%) 2776583594 ( 89.92%) 509.85
http(s) 1083961 ( 15.99%) 1316359540 ( 42.63%) 1214.40
http(c) 1385342 ( 20.44%) 137361306 ( 4.45%) 99.15
squid 54960 ( 0.81%) 8866665 ( 0.29%) 161.33
smtp 168146 ( 2.48%) 42452609 ( 1.37%) 252.47
nntp 19 ( 0.00%) 1140 ( 0.00%) 60.00
ftp 41742 ( 0.62%) 2880552 ( 0.09%) 69.01
pop3 2243 ( 0.03%) 363094 ( 0.01%) 161.88
imap 2812 ( 0.04%) 1968352 ( 0.06%) 699.98
telnet 458 ( 0.01%) 97782 ( 0.00%) 213.50
ssh 585246 ( 8.64%) 64754212 ( 2.10%) 110.64
dns 1987 ( 0.03%) 141692 ( 0.00%) 71.31
bgp 202 ( 0.00%) 96418 ( 0.00%) 477.32
napster 9 ( 0.00%) 558 ( 0.00%) 62.00
realaud 591 ( 0.01%) 303203 ( 0.01%) 513.03
rtsp 57010 ( 0.84%) 35999717 ( 1.17%) 631.46
icecast 3978 ( 0.06%) 242917 ( 0.01%) 61.07
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 2031246 ( 29.97%) 1163801761 ( 37.69%) 572.95
udp 1036642 ( 15.30%) 290346446 ( 9.40%) 280.08
dns 434822 ( 6.42%) 101189589 ( 3.28%) 232.71
realaud 982 ( 0.01%) 81562 ( 0.00%) 83.06
halflif 422 ( 0.01%) 74099 ( 0.00%) 175.59
starcra 3 ( 0.00%) 598 ( 0.00%) 199.33
everque 49 ( 0.00%) 5236 ( 0.00%) 106.86
unreal 5 ( 0.00%) 951 ( 0.00%) 190.20
quake 3 ( 0.00%) 241 ( 0.00%) 80.33
cuseeme 1 ( 0.00%) 80 ( 0.00%) 80.00
other 587222 ( 8.66%) 188379612 ( 6.10%) 320.80
icmp 148197 ( 2.19%) 15413930 ( 0.50%) 104.01
ip6 165 ( 0.00%) 17554 ( 0.00%) 106.39
other 9368 ( 0.14%) 1415890 ( 0.05%) 151.14
frag 10797 ( 0.16%) 7127721 ( 0.23%) 660.16
tcpdump file: 200511201400.dump.gz (192.27 MB)