Traffic Trace Info
DumpFile: 200501070300.dump
FileSize: 256.08MB
Id: 200501070300
StartTime: Fri Jan 7 03:00:00 2005
EndTime: Fri Jan 7 03:15:00 2005
TotalTime: 900.14 seconds
TotalCapSize: 199.92MB CapLen: 96 bytes
# of packets: 3680722 (1687.83MB)
AvgRate: 15.73Mbps stddev:1.23M
IP flow (unique src/dst pair) Information
# of flows: 354395 (avg. 10.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 2.2% 1.8% 1.2% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 259423
Top 10 bandwidth usage (bytes/total in %):
33.7% 13.6% 3.4% 2.8% 2.6% 2.6% 2.6% 2.4% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070300.pktlen.png)
detailed numbers
[ 16- 31]: 12859
[ 32- 63]: 1148395
[ 64- 127]: 1081553
[ 128- 255]: 211084
[ 256- 511]: 122746
[ 512- 1023]: 131998
[ 1024- 2047]: 972087
Protocol Breakdown
![[protocol breakdown chart]](200501070300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3680722 (100.00%) 1769820704 (100.00%) 480.84
ip 3649899 ( 99.16%) 1768865507 ( 99.95%) 484.63
tcp 2995273 ( 81.38%) 1641863266 ( 92.77%) 548.15
http(s) 480282 ( 13.05%) 561189293 ( 31.71%) 1168.46
http(c) 686570 ( 18.65%) 61828241 ( 3.49%) 90.05
squid 2470 ( 0.07%) 683605 ( 0.04%) 276.76
smtp 114791 ( 3.12%) 27424450 ( 1.55%) 238.91
nntp 90 ( 0.00%) 7848 ( 0.00%) 87.20
ftp 19304 ( 0.52%) 7463626 ( 0.42%) 386.64
pop3 1748 ( 0.05%) 398769 ( 0.02%) 228.13
imap 331 ( 0.01%) 25713 ( 0.00%) 77.68
telnet 134 ( 0.00%) 54014 ( 0.00%) 403.09
ssh 2268 ( 0.06%) 294352 ( 0.02%) 129.78
dns 1192 ( 0.03%) 94778 ( 0.01%) 79.51
bgp 225 ( 0.01%) 118210 ( 0.01%) 525.38
napster 1415 ( 0.04%) 143414 ( 0.01%) 101.35
rtsp 55943 ( 1.52%) 48986894 ( 2.77%) 875.66
icecast 34817 ( 0.95%) 2545994 ( 0.14%) 73.13
other 1584068 ( 43.04%) 930275954 ( 52.56%) 587.27
udp 469396 ( 12.75%) 99428436 ( 5.62%) 211.82
dns 282886 ( 7.69%) 67000691 ( 3.79%) 236.85
realaud 1781 ( 0.05%) 106932 ( 0.01%) 60.04
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
everque 2 ( 0.00%) 131 ( 0.00%) 65.50
unreal 4 ( 0.00%) 336 ( 0.00%) 84.00
quake 1 ( 0.00%) 73 ( 0.00%) 73.00
cuseeme 1 ( 0.00%) 61 ( 0.00%) 61.00
other 182255 ( 4.95%) 32236203 ( 1.82%) 176.87
icmp 103004 ( 2.80%) 8394271 ( 0.47%) 81.49
ipsec 181 ( 0.00%) 17790 ( 0.00%) 98.29
ip6 480 ( 0.01%) 77903 ( 0.00%) 162.30
other 81565 ( 2.22%) 19083841 ( 1.08%) 233.97
frag 19 ( 0.00%) 1340 ( 0.00%) 70.53
tcpdump file: 200501070300.dump.gz (102.96 MB)