Traffic Trace Info
DumpFile: 200512091400.dump
FileSize: 610.73MB
Id: 200512091400
StartTime: Fri Dec 9 14:00:00 2005
EndTime: Fri Dec 9 14:15:00 2005
TotalTime: 899.91 seconds
TotalCapSize: 474.27MB CapLen: 96 bytes
# of packets: 8942526 (3246.50MB)
AvgRate: 30.26Mbps stddev:0.73M
IP flow (unique src/dst pair) Information
# of flows: 1185544 (avg. 7.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.7% 1.6% 0.9% 0.9% 0.9% 0.8% 0.7% 0.7% 0.5%
IP address Information
# of IPv4 addresses: 692086
Top 10 bandwidth usage (bytes/total in %):
9.2% 4.6% 4.6% 3.6% 2.8% 2.8% 2.5% 2.4% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200512091400.pktlen.png)
detailed numbers
[ 16- 31]: 120203
[ 32- 63]: 3366934
[ 64- 127]: 2510115
[ 128- 255]: 493285
[ 256- 511]: 386162
[ 512- 1023]: 307853
[ 1024- 2047]: 1757974
Protocol Breakdown
![[protocol breakdown chart]](200512091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8942526 (100.00%) 3404196990 (100.00%) 380.68
ip 8692571 ( 97.20%) 3396657414 ( 99.78%) 390.75
tcp 7106513 ( 79.47%) 3074357512 ( 90.31%) 432.61
http(s) 1456977 ( 16.29%) 1656520664 ( 48.66%) 1136.96
http(c) 2446392 ( 27.36%) 290192559 ( 8.52%) 118.62
squid 111477 ( 1.25%) 32777466 ( 0.96%) 294.03
smtp 350282 ( 3.92%) 131231003 ( 3.85%) 374.64
nntp 136 ( 0.00%) 17690 ( 0.00%) 130.07
ftp 33870 ( 0.38%) 2917903 ( 0.09%) 86.15
pop3 6350 ( 0.07%) 1312013 ( 0.04%) 206.62
imap 12631 ( 0.14%) 6450864 ( 0.19%) 510.72
telnet 907 ( 0.01%) 78093 ( 0.00%) 86.10
ssh 7836 ( 0.09%) 1375901 ( 0.04%) 175.59
dns 2005 ( 0.02%) 128354 ( 0.00%) 64.02
bgp 233 ( 0.00%) 125037 ( 0.00%) 536.64
napster 146 ( 0.00%) 10778 ( 0.00%) 73.82
realaud 46 ( 0.00%) 6199 ( 0.00%) 134.76
rtsp 21423 ( 0.24%) 5194308 ( 0.15%) 242.46
icecast 4997 ( 0.06%) 341798 ( 0.01%) 68.40
hotline 8 ( 0.00%) 913 ( 0.00%) 114.12
other 2608210 ( 29.17%) 944207964 ( 27.74%) 362.01
udp 1259059 ( 14.08%) 270900482 ( 7.96%) 215.16
dns 839441 ( 9.39%) 177646101 ( 5.22%) 211.62
realaud 2163 ( 0.02%) 334658 ( 0.01%) 154.72
halflif 8 ( 0.00%) 624 ( 0.00%) 78.00
starcra 13773 ( 0.15%) 894872 ( 0.03%) 64.97
everque 12 ( 0.00%) 1284 ( 0.00%) 107.00
unreal 10 ( 0.00%) 1228 ( 0.00%) 122.80
quake 1 ( 0.00%) 76 ( 0.00%) 76.00
cuseeme 3 ( 0.00%) 212 ( 0.00%) 70.67
other 392615 ( 4.39%) 91144879 ( 2.68%) 232.15
icmp 175399 ( 1.96%) 16133327 ( 0.47%) 91.98
ip6 203 ( 0.00%) 21657 ( 0.00%) 106.68
other 151397 ( 1.69%) 35244436 ( 1.04%) 232.79
frag 2812 ( 0.03%) 4022214 ( 0.12%) 1430.37
tcpdump file: 200512091400.dump.gz (248.05 MB)