Traffic Trace Info
DumpFile: 200501070145.dump
FileSize: 307.81MB
Id: 200501070145
StartTime: Fri Jan 7 01:45:00 2005
EndTime: Fri Jan 7 02:00:00 2005
TotalTime: 900.28 seconds
TotalCapSize: 239.22MB CapLen: 96 bytes
# of packets: 4494813 (1968.29MB)
AvgRate: 18.34Mbps stddev:1.34M
IP flow (unique src/dst pair) Information
# of flows: 333247 (avg. 13.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.4% 2.0% 2.0% 1.9% 1.9% 1.4% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 236737
Top 10 bandwidth usage (bytes/total in %):
26.2% 17.3% 2.7% 2.7% 2.6% 2.6% 2.4% 2.4% 2.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070145.pktlen.png)
detailed numbers
[ 16- 31]: 18267
[ 32- 63]: 1536580
[ 64- 127]: 1326831
[ 128- 255]: 207643
[ 256- 511]: 137971
[ 512- 1023]: 122732
[ 1024- 2047]: 1144789
Protocol Breakdown
![[protocol breakdown chart]](200501070145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4494813 (100.00%) 2063906820 (100.00%) 459.18
ip 4450233 ( 99.01%) 2062524071 ( 99.93%) 463.46
tcp 3313419 ( 73.72%) 1898714305 ( 92.00%) 573.04
http(s) 643824 ( 14.32%) 787503513 ( 38.16%) 1223.17
http(c) 742433 ( 16.52%) 72472127 ( 3.51%) 97.61
squid 1452 ( 0.03%) 121199 ( 0.01%) 83.47
smtp 123844 ( 2.76%) 24028084 ( 1.16%) 194.02
nntp 137 ( 0.00%) 11122 ( 0.00%) 81.18
ftp 11770 ( 0.26%) 1861573 ( 0.09%) 158.16
pop3 2556 ( 0.06%) 288456 ( 0.01%) 112.85
imap 320 ( 0.01%) 25267 ( 0.00%) 78.96
telnet 418 ( 0.01%) 166896 ( 0.01%) 399.27
ssh 130967 ( 2.91%) 14230634 ( 0.69%) 108.66
dns 1037 ( 0.02%) 88454 ( 0.00%) 85.30
bgp 225 ( 0.01%) 113712 ( 0.01%) 505.39
napster 1015 ( 0.02%) 107094 ( 0.01%) 105.51
realaud 2 ( 0.00%) 134 ( 0.00%) 67.00
rtsp 111197 ( 2.47%) 128612476 ( 6.23%) 1156.62
icecast 33610 ( 0.75%) 2171192 ( 0.11%) 64.60
other 1496220 ( 33.29%) 866489913 ( 41.98%) 579.12
udp 934548 ( 20.79%) 130254737 ( 6.31%) 139.38
dns 297587 ( 6.62%) 72737502 ( 3.52%) 244.42
realaud 1834 ( 0.04%) 111212 ( 0.01%) 60.64
halflif 214 ( 0.00%) 12905 ( 0.00%) 60.30
starcra 1 ( 0.00%) 87 ( 0.00%) 87.00
everque 10 ( 0.00%) 832 ( 0.00%) 83.20
unreal 7 ( 0.00%) 519 ( 0.00%) 74.14
quake 4 ( 0.00%) 1001 ( 0.00%) 250.25
other 629098 ( 14.00%) 57193326 ( 2.77%) 90.91
icmp 109506 ( 2.44%) 8915731 ( 0.43%) 81.42
ipsec 183 ( 0.00%) 18150 ( 0.00%) 99.18
ip6 466 ( 0.01%) 76801 ( 0.00%) 164.81
other 92111 ( 2.05%) 24544347 ( 1.19%) 266.46
frag 18 ( 0.00%) 1080 ( 0.00%) 60.00
tcpdump file: 200501070145.dump.gz (118.50 MB)