Traffic Trace Info
DumpFile: 200512271400.dump
FileSize: 736.29MB
Id: 200512271400
StartTime: Tue Dec 27 14:00:01 2005
EndTime: Tue Dec 27 14:15:00 2005
TotalTime: 899.63 seconds
TotalCapSize: 574.03MB CapLen: 96 bytes
# of packets: 10633648 (3073.86MB)
AvgRate: 28.66Mbps stddev:1.06M
IP flow (unique src/dst pair) Information
# of flows: 668708 (avg. 15.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.5% 1.1% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 462024
Top 10 bandwidth usage (bytes/total in %):
20.5% 3.5% 3.3% 2.9% 2.6% 2.6% 1.9% 1.9% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200512271400.pktlen.png)
detailed numbers
[ 16- 31]: 134618
[ 32- 63]: 4520600
[ 64- 127]: 3154346
[ 128- 255]: 458370
[ 256- 511]: 502777
[ 512- 1023]: 382261
[ 1024- 2047]: 1480676
Protocol Breakdown
![[protocol breakdown chart]](200512271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10633648 (100.00%) 3223172308 (100.00%) 303.11
ip 10366810 ( 97.49%) 3215154939 ( 99.75%) 310.14
tcp 8930768 ( 83.99%) 2909807108 ( 90.28%) 325.82
http(s) 1066135 ( 10.03%) 986775267 ( 30.62%) 925.56
http(c) 2489881 ( 23.42%) 300447810 ( 9.32%) 120.67
squid 1460028 ( 13.73%) 211444436 ( 6.56%) 144.82
smtp 308079 ( 2.90%) 65105107 ( 2.02%) 211.33
nntp 80 ( 0.00%) 5999 ( 0.00%) 74.99
ftp 51579 ( 0.49%) 8414847 ( 0.26%) 163.14
pop3 4888 ( 0.05%) 1823767 ( 0.06%) 373.11
imap 2932 ( 0.03%) 1174619 ( 0.04%) 400.62
telnet 1175 ( 0.01%) 102720 ( 0.00%) 87.42
ssh 7327 ( 0.07%) 1423985 ( 0.04%) 194.35
dns 1968 ( 0.02%) 135156 ( 0.00%) 68.68
bgp 236 ( 0.00%) 75223 ( 0.00%) 318.74
napster 131 ( 0.00%) 9468 ( 0.00%) 72.27
realaud 71 ( 0.00%) 4625 ( 0.00%) 65.14
rtsp 8678 ( 0.08%) 1464374 ( 0.05%) 168.75
icecast 5579 ( 0.05%) 396299 ( 0.01%) 71.03
hotline 35 ( 0.00%) 2849 ( 0.00%) 81.40
other 3490984 ( 32.83%) 1329933451 ( 41.26%) 380.96
udp 1280847 ( 12.05%) 290084999 ( 9.00%) 226.48
dns 832635 ( 7.83%) 182836714 ( 5.67%) 219.59
realaud 977 ( 0.01%) 63221 ( 0.00%) 64.71
halflif 14965 ( 0.14%) 2610912 ( 0.08%) 174.47
everque 7 ( 0.00%) 1658 ( 0.00%) 236.86
quake 1 ( 0.00%) 73 ( 0.00%) 73.00
cuseeme 3 ( 0.00%) 210 ( 0.00%) 70.00
other 414262 ( 3.90%) 103674910 ( 3.22%) 250.26
icmp 133734 ( 1.26%) 12207055 ( 0.38%) 91.28
ip6 202 ( 0.00%) 20204 ( 0.00%) 100.02
other 21259 ( 0.20%) 3035573 ( 0.09%) 142.79
frag 20024 ( 0.19%) 12732346 ( 0.40%) 635.85
tcpdump file: 200512271400.dump.gz (309.21 MB)