Traffic Trace Info
DumpFile: 200512241400.dump
FileSize: 676.37MB
Id: 200512241400
StartTime: Sat Dec 24 14:00:00 2005
EndTime: Sat Dec 24 14:15:00 2005
TotalTime: 899.59 seconds
TotalCapSize: 518.34MB CapLen: 96 bytes
# of packets: 10357204 (2968.24MB)
AvgRate: 27.68Mbps stddev:1.30M
IP flow (unique src/dst pair) Information
# of flows: 624849 (avg. 16.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 2.3% 2.0% 1.4% 1.2% 1.1% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 392287
Top 10 bandwidth usage (bytes/total in %):
20.5% 6.1% 5.3% 5.3% 3.9% 3.1% 2.7% 2.4% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200512241400.pktlen.png)
detailed numbers
[ 16- 31]: 91212
[ 32- 63]: 5216653
[ 64- 127]: 2400789
[ 128- 255]: 472133
[ 256- 511]: 391297
[ 512- 1023]: 308734
[ 1024- 2047]: 1476386
Protocol Breakdown
![[protocol breakdown chart]](200512241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10357204 (100.00%) 3112428150 (100.00%) 300.51
ip 10174695 ( 98.24%) 3106941198 ( 99.82%) 305.36
tcp 5950391 ( 57.45%) 2595513001 ( 83.39%) 436.19
http(s) 1033129 ( 9.97%) 1013582385 ( 32.57%) 981.08
http(c) 1849890 ( 17.86%) 195745821 ( 6.29%) 105.81
squid 243552 ( 2.35%) 106650835 ( 3.43%) 437.90
smtp 270876 ( 2.62%) 69695699 ( 2.24%) 257.30
nntp 17 ( 0.00%) 1022 ( 0.00%) 60.12
ftp 13552 ( 0.13%) 935305 ( 0.03%) 69.02
pop3 1529 ( 0.01%) 232053 ( 0.01%) 151.77
imap 1130 ( 0.01%) 142466 ( 0.00%) 126.08
telnet 597 ( 0.01%) 57625 ( 0.00%) 96.52
ssh 22573 ( 0.22%) 2253685 ( 0.07%) 99.84
dns 1874 ( 0.02%) 120586 ( 0.00%) 64.35
bgp 318 ( 0.00%) 115828 ( 0.00%) 364.24
napster 4 ( 0.00%) 242 ( 0.00%) 60.50
rtsp 20868 ( 0.20%) 17131914 ( 0.55%) 820.97
icecast 9053 ( 0.09%) 571942 ( 0.02%) 63.18
other 2457671 ( 23.73%) 1187458311 ( 38.15%) 483.16
udp 3896383 ( 37.62%) 467580546 ( 15.02%) 120.00
dns 717035 ( 6.92%) 153328912 ( 4.93%) 213.84
rip 45 ( 0.00%) 2700 ( 0.00%) 60.00
realaud 7426 ( 0.07%) 4712380 ( 0.15%) 634.58
halflif 72 ( 0.00%) 4362 ( 0.00%) 60.58
starcra 38 ( 0.00%) 2280 ( 0.00%) 60.00
everque 126 ( 0.00%) 8769 ( 0.00%) 69.60
unreal 52 ( 0.00%) 3140 ( 0.00%) 60.38
quake 138 ( 0.00%) 8302 ( 0.00%) 60.16
cuseeme 36 ( 0.00%) 2215 ( 0.00%) 61.53
other 3153524 ( 30.45%) 308598529 ( 9.92%) 97.86
icmp 124672 ( 1.20%) 11827114 ( 0.38%) 94.87
ip6 152 ( 0.00%) 15904 ( 0.00%) 104.63
other 203097 ( 1.96%) 32004633 ( 1.03%) 157.58
frag 20733 ( 0.20%) 13416057 ( 0.43%) 647.09
tcpdump file: 200512241400.dump.gz (254.29 MB)