Traffic Trace Info
DumpFile: 200501070115.dump
FileSize: 279.68MB
Id: 200501070115
StartTime: Fri Jan 7 01:15:00 2005
EndTime: Fri Jan 7 01:30:00 2005
TotalTime: 900.06 seconds
TotalCapSize: 218.47MB CapLen: 96 bytes
# of packets: 4011353 (1843.09MB)
AvgRate: 17.18Mbps stddev:1.15M
IP flow (unique src/dst pair) Information
# of flows: 393806 (avg. 10.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.3% 2.0% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 295315
Top 10 bandwidth usage (bytes/total in %):
29.2% 18.6% 2.7% 2.6% 2.6% 2.5% 2.5% 2.4% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070115.pktlen.png)
detailed numbers
[ 16- 31]: 15464
[ 32- 63]: 1153437
[ 64- 127]: 1344637
[ 128- 255]: 156510
[ 256- 511]: 135662
[ 512- 1023]: 125241
[ 1024- 2047]: 1080402
Protocol Breakdown
![[protocol breakdown chart]](200501070115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4011353 (100.00%) 1932624681 (100.00%) 481.79
ip 3974542 ( 99.08%) 1931484603 ( 99.94%) 485.96
tcp 3206269 ( 79.93%) 1786635435 ( 92.45%) 557.23
http(s) 627349 ( 15.64%) 759007566 ( 39.27%) 1209.86
http(c) 861438 ( 21.47%) 80760406 ( 4.18%) 93.75
squid 1224 ( 0.03%) 189434 ( 0.01%) 154.77
smtp 124884 ( 3.11%) 27594468 ( 1.43%) 220.96
nntp 229 ( 0.01%) 16712 ( 0.00%) 72.98
ftp 6111 ( 0.15%) 501583 ( 0.03%) 82.08
pop3 1359 ( 0.03%) 204254 ( 0.01%) 150.30
imap 487 ( 0.01%) 37703 ( 0.00%) 77.42
telnet 1301 ( 0.03%) 723613 ( 0.04%) 556.20
ssh 98926 ( 2.47%) 11482487 ( 0.59%) 116.07
dns 640 ( 0.02%) 46425 ( 0.00%) 72.54
bgp 246 ( 0.01%) 130905 ( 0.01%) 532.13
napster 1092 ( 0.03%) 117159 ( 0.01%) 107.29
realaud 24 ( 0.00%) 2095 ( 0.00%) 87.29
rtsp 58836 ( 1.47%) 73562282 ( 3.81%) 1250.29
icecast 33336 ( 0.83%) 2229089 ( 0.12%) 66.87
other 1377113 ( 34.33%) 829631176 ( 42.93%) 602.44
udp 508911 ( 12.69%) 107669739 ( 5.57%) 211.57
dns 314119 ( 7.83%) 73907961 ( 3.82%) 235.29
realaud 1792 ( 0.04%) 107592 ( 0.01%) 60.04
halflif 7 ( 0.00%) 803 ( 0.00%) 114.71
everque 4 ( 0.00%) 295 ( 0.00%) 73.75
unreal 56 ( 0.00%) 4704 ( 0.00%) 84.00
quake 8 ( 0.00%) 542 ( 0.00%) 67.75
other 190318 ( 4.74%) 33559096 ( 1.74%) 176.33
icmp 143453 ( 3.58%) 10824320 ( 0.56%) 75.46
ipsec 180 ( 0.00%) 17636 ( 0.00%) 97.98
ip6 486 ( 0.01%) 79634 ( 0.00%) 163.86
other 115243 ( 2.87%) 26257839 ( 1.36%) 227.85
frag 20 ( 0.00%) 1174 ( 0.00%) 58.70
tcpdump file: 200501070115.dump.gz (112.28 MB)