Traffic Trace Info
DumpFile: 200511241400.dump
FileSize: 520.76MB
Id: 200511241400
StartTime: Thu Nov 24 14:00:00 2005
EndTime: Thu Nov 24 14:15:00 2005
TotalTime: 900.44 seconds
TotalCapSize: 404.16MB CapLen: 96 bytes
# of packets: 7641626 (3270.37MB)
AvgRate: 30.47Mbps stddev:0.65M
IP flow (unique src/dst pair) Information
# of flows: 518802 (avg. 14.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 337613
Top 10 bandwidth usage (bytes/total in %):
13.5% 3.8% 3.6% 2.9% 2.9% 2.5% 2.4% 2.3% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200511241400.pktlen.png)
detailed numbers
[ 16- 31]: 96833
[ 32- 63]: 2250282
[ 64- 127]: 2210896
[ 128- 255]: 532277
[ 256- 511]: 403644
[ 512- 1023]: 333400
[ 1024- 2047]: 1814294
Protocol Breakdown
![[protocol breakdown chart]](200511241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7641626 (100.00%) 3429230841 (100.00%) 448.76
ip 7429558 ( 97.22%) 3422799210 ( 99.81%) 460.70
tcp 5742490 ( 75.15%) 3026360305 ( 88.25%) 527.01
http(s) 1468472 ( 19.22%) 1619695664 ( 47.23%) 1102.98
http(c) 1817326 ( 23.78%) 230376160 ( 6.72%) 126.77
squid 76822 ( 1.01%) 10425450 ( 0.30%) 135.71
smtp 336088 ( 4.40%) 102830346 ( 3.00%) 305.96
nntp 83 ( 0.00%) 6679 ( 0.00%) 80.47
ftp 57326 ( 0.75%) 14951145 ( 0.44%) 260.81
pop3 4887 ( 0.06%) 1034282 ( 0.03%) 211.64
imap 2755 ( 0.04%) 685361 ( 0.02%) 248.77
telnet 1542 ( 0.02%) 174832 ( 0.01%) 113.38
ssh 18987 ( 0.25%) 4174733 ( 0.12%) 219.87
dns 2036 ( 0.03%) 182509 ( 0.01%) 89.64
bgp 155 ( 0.00%) 65229 ( 0.00%) 420.83
rtsp 18422 ( 0.24%) 5128347 ( 0.15%) 278.38
icecast 15971 ( 0.21%) 1305085 ( 0.04%) 81.72
other 1881042 ( 24.62%) 1033927534 ( 30.15%) 549.66
udp 1496448 ( 19.58%) 363391644 ( 10.60%) 242.84
dns 886514 ( 11.60%) 181235242 ( 5.29%) 204.44
realaud 2841 ( 0.04%) 171989 ( 0.01%) 60.54
halflif 36948 ( 0.48%) 4837792 ( 0.14%) 130.94
everque 121 ( 0.00%) 10851 ( 0.00%) 89.68
unreal 14 ( 0.00%) 1993 ( 0.00%) 142.36
quake 5 ( 0.00%) 410 ( 0.00%) 82.00
other 551599 ( 7.22%) 176300005 ( 5.14%) 319.62
icmp 126445 ( 1.65%) 13613668 ( 0.40%) 107.66
ip6 325 ( 0.00%) 32088 ( 0.00%) 98.73
other 63850 ( 0.84%) 19401505 ( 0.57%) 303.86
frag 11567 ( 0.15%) 7487364 ( 0.22%) 647.30
tcpdump file: 200511241400.dump.gz (220.91 MB)