Traffic Trace Info
DumpFile: 200512041400.dump
FileSize: 353.60MB
Id: 200512041400
StartTime: Sun Dec 4 14:00:00 2005
EndTime: Sun Dec 4 14:15:00 2005
TotalTime: 899.51 seconds
TotalCapSize: 275.33MB CapLen: 96 bytes
# of packets: 5129824 (2169.17MB)
AvgRate: 20.23Mbps stddev:1.45M
IP flow (unique src/dst pair) Information
# of flows: 333927 (avg. 15.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.3% 1.9% 1.5% 1.4% 1.2% 1.2% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 240205
Top 10 bandwidth usage (bytes/total in %):
28.9% 12.3% 6.2% 6.2% 5.5% 3.7% 2.8% 2.6% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200512041400.pktlen.png)
detailed numbers
[ 16- 31]: 33976
[ 32- 63]: 1699627
[ 64- 127]: 1379227
[ 128- 255]: 325570
[ 256- 511]: 266593
[ 512- 1023]: 177344
[ 1024- 2047]: 1247487
Protocol Breakdown
![[protocol breakdown chart]](200512041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5129824 (100.00%) 2274535310 (100.00%) 443.39
ip 5061895 ( 98.68%) 2272492991 ( 99.91%) 448.94
tcp 3932552 ( 76.66%) 1928570855 ( 84.79%) 490.41
http(s) 405592 ( 7.91%) 445348678 ( 19.58%) 1098.02
http(c) 799846 ( 15.59%) 68996429 ( 3.03%) 86.26
squid 289827 ( 5.65%) 32274843 ( 1.42%) 111.36
smtp 144989 ( 2.83%) 24252912 ( 1.07%) 167.27
nntp 35 ( 0.00%) 2845 ( 0.00%) 81.29
ftp 11500 ( 0.22%) 859646 ( 0.04%) 74.75
pop3 3616 ( 0.07%) 346348 ( 0.02%) 95.78
imap 1089 ( 0.02%) 143957 ( 0.01%) 132.19
telnet 22 ( 0.00%) 1546 ( 0.00%) 70.27
ssh 4395 ( 0.09%) 4469289 ( 0.20%) 1016.90
dns 1788 ( 0.03%) 120348 ( 0.01%) 67.31
bgp 182 ( 0.00%) 73343 ( 0.00%) 402.98
napster 367 ( 0.01%) 39136 ( 0.00%) 106.64
rtsp 11163 ( 0.22%) 5099900 ( 0.22%) 456.86
icecast 15278 ( 0.30%) 942659 ( 0.04%) 61.70
other 2234234 ( 43.55%) 1345300075 ( 59.15%) 602.13
udp 1005085 ( 19.59%) 331261646 ( 14.56%) 329.59
dns 583946 ( 11.38%) 120273835 ( 5.29%) 205.97
rip 2 ( 0.00%) 132 ( 0.00%) 66.00
realaud 7 ( 0.00%) 515 ( 0.00%) 73.57
halflif 8078 ( 0.16%) 1013896 ( 0.04%) 125.51
everque 10 ( 0.00%) 1457 ( 0.00%) 145.70
unreal 1 ( 0.00%) 83 ( 0.00%) 83.00
quake 5 ( 0.00%) 529 ( 0.00%) 105.80
cuseeme 1 ( 0.00%) 68 ( 0.00%) 68.00
other 404390 ( 7.88%) 209531493 ( 9.21%) 518.14
icmp 123139 ( 2.40%) 12531582 ( 0.55%) 101.77
ip6 264 ( 0.01%) 32528 ( 0.00%) 123.21
other 855 ( 0.02%) 96380 ( 0.00%) 112.73
frag 10571 ( 0.21%) 6803728 ( 0.30%) 643.62
tcpdump file: 200512041400.dump.gz (143.79 MB)