Traffic Trace Info
DumpFile: 200512101400.dump
FileSize: 527.18MB
Id: 200512101400
StartTime: Sat Dec 10 14:00:01 2005
EndTime: Sat Dec 10 14:15:00 2005
TotalTime: 898.92 seconds
TotalCapSize: 409.90MB CapLen: 96 bytes
# of packets: 7685676 (2820.83MB)
AvgRate: 26.32Mbps stddev:1.41M
IP flow (unique src/dst pair) Information
# of flows: 891912 (avg. 8.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.9% 1.9% 1.2% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 541119
Top 10 bandwidth usage (bytes/total in %):
19.2% 5.3% 5.3% 3.8% 3.2% 2.4% 2.4% 2.1% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200512101400.pktlen.png)
detailed numbers
[ 16- 31]: 78506
[ 32- 63]: 2615309
[ 64- 127]: 2425787
[ 128- 255]: 454891
[ 256- 511]: 321407
[ 512- 1023]: 281821
[ 1024- 2047]: 1507955
Protocol Breakdown
![[protocol breakdown chart]](200512101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7685676 (100.00%) 2957852095 (100.00%) 384.85
ip 7524828 ( 97.91%) 2953002926 ( 99.84%) 392.43
tcp 5959598 ( 77.54%) 2667402337 ( 90.18%) 447.58
http(s) 968382 ( 12.60%) 1102477850 ( 37.27%) 1138.47
http(c) 1633454 ( 21.25%) 180224571 ( 6.09%) 110.33
squid 61843 ( 0.80%) 9684921 ( 0.33%) 156.60
smtp 311061 ( 4.05%) 65570911 ( 2.22%) 210.80
nntp 33 ( 0.00%) 2390 ( 0.00%) 72.42
ftp 104970 ( 1.37%) 6791500 ( 0.23%) 64.70
pop3 3232 ( 0.04%) 377107 ( 0.01%) 116.68
imap 1691 ( 0.02%) 601016 ( 0.02%) 355.42
telnet 494 ( 0.01%) 44095 ( 0.00%) 89.26
ssh 24711 ( 0.32%) 6317061 ( 0.21%) 255.64
dns 1920 ( 0.02%) 137321 ( 0.00%) 71.52
bgp 227 ( 0.00%) 120227 ( 0.00%) 529.63
realaud 8 ( 0.00%) 549 ( 0.00%) 68.62
rtsp 52255 ( 0.68%) 43749534 ( 1.48%) 837.23
icecast 29719 ( 0.39%) 12006847 ( 0.41%) 404.01
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 2740956 ( 35.66%) 1238447341 ( 41.87%) 451.83
udp 1137376 ( 14.80%) 228013412 ( 7.71%) 200.47
dns 730674 ( 9.51%) 146692539 ( 4.96%) 200.76
realaud 183 ( 0.00%) 15406 ( 0.00%) 84.19
halflif 6 ( 0.00%) 442 ( 0.00%) 73.67
starcra 1 ( 0.00%) 99 ( 0.00%) 99.00
everque 4 ( 0.00%) 353 ( 0.00%) 88.25
unreal 1 ( 0.00%) 83 ( 0.00%) 83.00
quake 8 ( 0.00%) 663 ( 0.00%) 82.88
cuseeme 7 ( 0.00%) 1535 ( 0.00%) 219.29
other 399719 ( 5.20%) 81068862 ( 2.74%) 202.81
icmp 193655 ( 2.52%) 17327327 ( 0.59%) 89.48
ipsec 13 ( 0.00%) 1950 ( 0.00%) 150.00
ip6 143 ( 0.00%) 15198 ( 0.00%) 106.28
other 234043 ( 3.05%) 40242702 ( 1.36%) 171.95
frag 65 ( 0.00%) 15647 ( 0.00%) 240.72
tcpdump file: 200512101400.dump.gz (211.03 MB)