Traffic Trace Info
DumpFile: 200501070130.dump
FileSize: 340.79MB
Id: 200501070130
StartTime: Fri Jan 7 01:30:00 2005
EndTime: Fri Jan 7 01:45:00 2005
TotalTime: 900.07 seconds
TotalCapSize: 263.60MB CapLen: 96 bytes
# of packets: 5058729 (1837.50MB)
AvgRate: 17.12Mbps stddev:1.75M
IP flow (unique src/dst pair) Information
# of flows: 418296 (avg. 12.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.6% 2.0% 2.0% 1.8% 1.5% 1.3% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 310717
Top 10 bandwidth usage (bytes/total in %):
28.2% 12.0% 3.0% 2.9% 2.9% 2.8% 2.7% 2.7% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070130.pktlen.png)
detailed numbers
[ 16- 31]: 19540
[ 32- 63]: 2158110
[ 64- 127]: 1419336
[ 128- 255]: 183053
[ 256- 511]: 134636
[ 512- 1023]: 119529
[ 1024- 2047]: 1024525
Protocol Breakdown
![[protocol breakdown chart]](200501070130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5058729 (100.00%) 1926753967 (100.00%) 380.88
ip 5010120 ( 99.04%) 1925244175 ( 99.92%) 384.27
tcp 3349364 ( 66.21%) 1705167133 ( 88.50%) 509.10
http(s) 563208 ( 11.13%) 666781737 ( 34.61%) 1183.90
http(c) 848479 ( 16.77%) 79482578 ( 4.13%) 93.68
squid 3924 ( 0.08%) 3728972 ( 0.19%) 950.30
smtp 131079 ( 2.59%) 32919537 ( 1.71%) 251.14
nntp 184 ( 0.00%) 13984 ( 0.00%) 76.00
ftp 5612 ( 0.11%) 422568 ( 0.02%) 75.30
pop3 1262 ( 0.02%) 211529 ( 0.01%) 167.61
imap 559 ( 0.01%) 43360 ( 0.00%) 77.57
telnet 590 ( 0.01%) 338052 ( 0.02%) 572.97
ssh 161128 ( 3.19%) 24029775 ( 1.25%) 149.13
dns 758 ( 0.01%) 61621 ( 0.00%) 81.29
bgp 238 ( 0.00%) 121915 ( 0.01%) 512.25
napster 1095 ( 0.02%) 116626 ( 0.01%) 106.51
realaud 21 ( 0.00%) 1858 ( 0.00%) 88.48
rtsp 57041 ( 1.13%) 72654627 ( 3.77%) 1273.73
icecast 33012 ( 0.65%) 2070179 ( 0.11%) 62.71
other 1528789 ( 30.22%) 821743911 ( 42.65%) 537.51
udp 1439929 ( 28.46%) 182927584 ( 9.49%) 127.04
dns 302842 ( 5.99%) 73039520 ( 3.79%) 241.18
realaud 1801 ( 0.04%) 108132 ( 0.01%) 60.04
halflif 2 ( 0.00%) 120 ( 0.00%) 60.00
starcra 1 ( 0.00%) 81 ( 0.00%) 81.00
everque 3 ( 0.00%) 189 ( 0.00%) 63.00
unreal 4 ( 0.00%) 306 ( 0.00%) 76.50
quake 5 ( 0.00%) 340 ( 0.00%) 68.00
cuseeme 6 ( 0.00%) 504 ( 0.00%) 84.00
other 1124248 ( 22.22%) 105376966 ( 5.47%) 93.73
icmp 106305 ( 2.10%) 8634609 ( 0.45%) 81.22
ipsec 183 ( 0.00%) 18162 ( 0.00%) 99.25
ip6 491 ( 0.01%) 81482 ( 0.00%) 165.95
other 113848 ( 2.25%) 28415205 ( 1.47%) 249.59
frag 17372 ( 0.34%) 25139537 ( 1.30%) 1447.13
tcpdump file: 200501070130.dump.gz (124.22 MB)