Traffic Trace Info
DumpFile: 200511251400.dump
FileSize: 573.87MB
Id: 200511251400
StartTime: Fri Nov 25 14:00:00 2005
EndTime: Fri Nov 25 14:15:01 2005
TotalTime: 900.69 seconds
TotalCapSize: 444.93MB CapLen: 96 bytes
# of packets: 8450596 (3405.05MB)
AvgRate: 31.71Mbps stddev:0.47M
IP flow (unique src/dst pair) Information
# of flows: 598526 (avg. 14.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.2% 1.1% 1.1% 1.0% 1.0% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 406648
Top 10 bandwidth usage (bytes/total in %):
10.8% 6.4% 3.1% 2.9% 2.6% 2.4% 2.2% 2.0% 1.9% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200511251400.pktlen.png)
detailed numbers
[ 16- 31]: 112971
[ 32- 63]: 2808952
[ 64- 127]: 2329237
[ 128- 255]: 489613
[ 256- 511]: 407063
[ 512- 1023]: 442268
[ 1024- 2047]: 1860492
Protocol Breakdown
![[protocol breakdown chart]](200511251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8450596 (100.00%) 3570448908 (100.00%) 422.51
ip 8204232 ( 97.08%) 3562978097 ( 99.79%) 434.29
tcp 6425795 ( 76.04%) 3034902675 ( 85.00%) 472.30
http(s) 1377951 ( 16.31%) 1502202959 ( 42.07%) 1090.17
http(c) 1860090 ( 22.01%) 257321967 ( 7.21%) 138.34
squid 102139 ( 1.21%) 12026059 ( 0.34%) 117.74
smtp 308239 ( 3.65%) 99263889 ( 2.78%) 322.04
nntp 247 ( 0.00%) 32774 ( 0.00%) 132.69
ftp 57648 ( 0.68%) 11110798 ( 0.31%) 192.74
pop3 4785 ( 0.06%) 1752478 ( 0.05%) 366.24
imap 4129 ( 0.05%) 1601563 ( 0.04%) 387.88
telnet 1590 ( 0.02%) 167630 ( 0.00%) 105.43
ssh 19723 ( 0.23%) 4829578 ( 0.14%) 244.87
dns 1560 ( 0.02%) 102154 ( 0.00%) 65.48
bgp 324 ( 0.00%) 195884 ( 0.01%) 604.58
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 16798 ( 0.20%) 8506982 ( 0.24%) 506.43
icecast 19225 ( 0.23%) 2646222 ( 0.07%) 137.64
other 2608014 ( 30.86%) 1131649154 ( 31.69%) 433.91
udp 1553964 ( 18.39%) 492025978 ( 13.78%) 316.63
dns 814978 ( 9.64%) 168060667 ( 4.71%) 206.21
realaud 6043 ( 0.07%) 2678999 ( 0.08%) 443.32
halflif 38780 ( 0.46%) 4938668 ( 0.14%) 127.35
everque 33 ( 0.00%) 3684 ( 0.00%) 111.64
unreal 18 ( 0.00%) 1579 ( 0.00%) 87.72
quake 8 ( 0.00%) 896 ( 0.00%) 112.00
cuseeme 2 ( 0.00%) 414 ( 0.00%) 207.00
other 660218 ( 7.81%) 313546084 ( 8.78%) 474.91
icmp 179493 ( 2.12%) 16542357 ( 0.46%) 92.16
ip6 280 ( 0.00%) 33128 ( 0.00%) 118.31
other 44700 ( 0.53%) 19473959 ( 0.55%) 435.66
frag 37994 ( 0.45%) 25340164 ( 0.71%) 666.95
tcpdump file: 200511251400.dump.gz (241.26 MB)