Traffic Trace Info
DumpFile: 200511271400.dump
FileSize: 383.05MB
Id: 200511271400
StartTime: Sun Nov 27 14:00:01 2005
EndTime: Sun Nov 27 14:15:01 2005
TotalTime: 899.96 seconds
TotalCapSize: 299.40MB CapLen: 96 bytes
# of packets: 5482297 (2547.92MB)
AvgRate: 23.75Mbps stddev:1.32M
IP flow (unique src/dst pair) Information
# of flows: 436191 (avg. 12.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.3% 2.2% 2.0% 1.5% 1.3% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 300441
Top 10 bandwidth usage (bytes/total in %):
24.1% 8.0% 6.9% 5.3% 4.5% 3.4% 2.3% 2.3% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200511271400.pktlen.png)
detailed numbers
[ 16- 31]: 47486
[ 32- 63]: 1330864
[ 64- 127]: 1715216
[ 128- 255]: 399840
[ 256- 511]: 342638
[ 512- 1023]: 197421
[ 1024- 2047]: 1448832
Protocol Breakdown
![[protocol breakdown chart]](200511271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5482297 (100.00%) 2671687603 (100.00%) 487.33
ip 5381274 ( 98.16%) 2668631592 ( 99.89%) 495.91
tcp 4141813 ( 75.55%) 2356374492 ( 88.20%) 568.92
http(s) 966081 ( 17.62%) 1129859335 ( 42.29%) 1169.53
http(c) 1003003 ( 18.30%) 111429521 ( 4.17%) 111.10
squid 78567 ( 1.43%) 12683323 ( 0.47%) 161.43
smtp 231049 ( 4.21%) 50115324 ( 1.88%) 216.90
nntp 35 ( 0.00%) 2218 ( 0.00%) 63.37
ftp 46349 ( 0.85%) 32101514 ( 1.20%) 692.60
pop3 1195 ( 0.02%) 179617 ( 0.01%) 150.31
imap 1937 ( 0.04%) 1618571 ( 0.06%) 835.61
telnet 114 ( 0.00%) 11652 ( 0.00%) 102.21
ssh 5248 ( 0.10%) 604806 ( 0.02%) 115.25
dns 1518 ( 0.03%) 96095 ( 0.00%) 63.30
bgp 193 ( 0.00%) 90649 ( 0.00%) 469.68
napster 4 ( 0.00%) 693 ( 0.00%) 173.25
realaud 60 ( 0.00%) 5860 ( 0.00%) 97.67
rtsp 1668 ( 0.03%) 1712413 ( 0.06%) 1026.63
icecast 33060 ( 0.60%) 25817131 ( 0.97%) 780.92
other 1754395 ( 32.00%) 989448974 ( 37.03%) 563.98
udp 1099786 ( 20.06%) 297074328 ( 11.12%) 270.12
dns 682263 ( 12.44%) 141781347 ( 5.31%) 207.81
realaud 9637 ( 0.18%) 7702923 ( 0.29%) 799.31
halflif 2 ( 0.00%) 144 ( 0.00%) 72.00
starcra 1 ( 0.00%) 71 ( 0.00%) 71.00
everque 9 ( 0.00%) 1641 ( 0.00%) 182.33
unreal 6 ( 0.00%) 965 ( 0.00%) 160.83
quake 2 ( 0.00%) 157 ( 0.00%) 78.50
cuseeme 1 ( 0.00%) 92 ( 0.00%) 92.00
other 395528 ( 7.21%) 146150739 ( 5.47%) 369.51
icmp 126824 ( 2.31%) 13077149 ( 0.49%) 103.11
ip6 166 ( 0.00%) 17788 ( 0.00%) 107.16
other 12685 ( 0.23%) 2087835 ( 0.08%) 164.59
frag 14014 ( 0.26%) 12019087 ( 0.45%) 857.65
tcpdump file: 200511271400.dump.gz (157.55 MB)