Traffic Trace Info
DumpFile: 200512291400.dump
FileSize: 656.51MB
Id: 200512291400
StartTime: Thu Dec 29 14:00:01 2005
EndTime: Thu Dec 29 14:15:00 2005
TotalTime: 899.61 seconds
TotalCapSize: 509.57MB CapLen: 96 bytes
# of packets: 9629714 (2775.36MB)
AvgRate: 25.88Mbps stddev:1.24M
IP flow (unique src/dst pair) Information
# of flows: 590662 (avg. 16.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.5% 1.1% 1.0% 1.0% 1.0% 0.9% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 395479
Top 10 bandwidth usage (bytes/total in %):
17.2% 4.5% 3.8% 3.2% 3.2% 2.9% 2.7% 2.7% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200512291400.pktlen.png)
detailed numbers
[ 16- 31]: 104523
[ 32- 63]: 3388433
[ 64- 127]: 3445383
[ 128- 255]: 583541
[ 256- 511]: 487729
[ 512- 1023]: 306999
[ 1024- 2047]: 1313106
Protocol Breakdown
![[protocol breakdown chart]](200512291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9629714 (100.00%) 2910178200 (100.00%) 302.21
ip 9424145 ( 97.87%) 2904008316 ( 99.79%) 308.15
tcp 7687531 ( 79.83%) 2545275168 ( 87.46%) 331.09
http(s) 842511 ( 8.75%) 753458462 ( 25.89%) 894.30
http(c) 2337519 ( 24.27%) 299204935 ( 10.28%) 128.00
squid 1811269 ( 18.81%) 252933928 ( 8.69%) 139.64
smtp 334588 ( 3.47%) 86517577 ( 2.97%) 258.58
nntp 64 ( 0.00%) 5025 ( 0.00%) 78.52
ftp 13703 ( 0.14%) 1389860 ( 0.05%) 101.43
pop3 3091 ( 0.03%) 1248154 ( 0.04%) 403.80
imap 761 ( 0.01%) 77916 ( 0.00%) 102.39
telnet 1060 ( 0.01%) 91622 ( 0.00%) 86.44
ssh 92486 ( 0.96%) 6269619 ( 0.22%) 67.79
dns 2151 ( 0.02%) 153621 ( 0.01%) 71.42
bgp 413 ( 0.00%) 235242 ( 0.01%) 569.59
realaud 29 ( 0.00%) 1798 ( 0.00%) 62.00
rtsp 31972 ( 0.33%) 32809939 ( 1.13%) 1026.21
icecast 4329 ( 0.04%) 303591 ( 0.01%) 70.13
hotline 549 ( 0.01%) 39204 ( 0.00%) 71.41
other 2189448 ( 22.74%) 1109791184 ( 38.13%) 506.88
udp 1338931 ( 13.90%) 304605846 ( 10.47%) 227.50
dns 774722 ( 8.05%) 160446623 ( 5.51%) 207.10
realaud 18735 ( 0.19%) 8569306 ( 0.29%) 457.40
halflif 3 ( 0.00%) 257 ( 0.00%) 85.67
starcra 8 ( 0.00%) 717 ( 0.00%) 89.62
everque 4 ( 0.00%) 594 ( 0.00%) 148.50
unreal 2 ( 0.00%) 344 ( 0.00%) 172.00
quake 6 ( 0.00%) 579 ( 0.00%) 96.50
cuseeme 2 ( 0.00%) 181 ( 0.00%) 90.50
other 528891 ( 5.49%) 134738306 ( 4.63%) 254.76
icmp 128408 ( 1.33%) 12072365 ( 0.41%) 94.02
ip6 879 ( 0.01%) 83743 ( 0.00%) 95.27
other 268396 ( 2.79%) 41971194 ( 1.44%) 156.38
frag 20589 ( 0.21%) 13319215 ( 0.46%) 646.91
tcpdump file: 200512291400.dump.gz (274.04 MB)