Traffic Trace Info
DumpFile: 200501070415.dump
FileSize: 251.67MB
Id: 200501070415
StartTime: Fri Jan 7 04:15:00 2005
EndTime: Fri Jan 7 04:30:00 2005
TotalTime: 899.95 seconds
TotalCapSize: 196.90MB CapLen: 96 bytes
# of packets: 3588996 (1690.23MB)
AvgRate: 15.76Mbps stddev:1.62M
IP flow (unique src/dst pair) Information
# of flows: 338054 (avg. 10.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.7% 1.8% 1.5% 1.4% 1.3% 1.2% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 247908
Top 10 bandwidth usage (bytes/total in %):
35.9% 11.0% 7.1% 4.2% 2.7% 2.6% 2.5% 2.4% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070415.pktlen.png)
detailed numbers
[ 16- 31]: 11899
[ 32- 63]: 1075912
[ 64- 127]: 1066697
[ 128- 255]: 209608
[ 256- 511]: 127337
[ 512- 1023]: 115844
[ 1024- 2047]: 981699
Protocol Breakdown
![[protocol breakdown chart]](200501070415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3588996 (100.00%) 1772332747 (100.00%) 493.82
ip 3560332 ( 99.20%) 1771444341 ( 99.95%) 497.55
tcp 2972994 ( 82.84%) 1655683386 ( 93.42%) 556.91
http(s) 526899 ( 14.68%) 650346702 ( 36.69%) 1234.29
http(c) 554278 ( 15.44%) 47077013 ( 2.66%) 84.93
squid 2268 ( 0.06%) 590359 ( 0.03%) 260.30
smtp 122352 ( 3.41%) 25325149 ( 1.43%) 206.99
nntp 90 ( 0.00%) 7826 ( 0.00%) 86.96
ftp 6843 ( 0.19%) 475968 ( 0.03%) 69.56
pop3 1202 ( 0.03%) 232103 ( 0.01%) 193.10
imap 565 ( 0.02%) 43923 ( 0.00%) 77.74
telnet 86 ( 0.00%) 6075 ( 0.00%) 70.64
ssh 128511 ( 3.58%) 13945717 ( 0.79%) 108.52
dns 1095 ( 0.03%) 88991 ( 0.01%) 81.27
bgp 219 ( 0.01%) 109835 ( 0.01%) 501.53
napster 1227 ( 0.03%) 141012 ( 0.01%) 114.92
rtsp 24560 ( 0.68%) 30535020 ( 1.72%) 1243.28
icecast 28378 ( 0.79%) 1753332 ( 0.10%) 61.78
other 1565012 ( 43.61%) 884683456 ( 49.92%) 565.29
udp 451711 ( 12.59%) 92815039 ( 5.24%) 205.47
dns 292547 ( 8.15%) 67399981 ( 3.80%) 230.39
realaud 1799 ( 0.05%) 108052 ( 0.01%) 60.06
halflif 5 ( 0.00%) 725 ( 0.00%) 145.00
unreal 5 ( 0.00%) 397 ( 0.00%) 79.40
quake 9776 ( 0.27%) 617348 ( 0.03%) 63.15
other 145461 ( 4.05%) 24616422 ( 1.39%) 169.23
icmp 99278 ( 2.77%) 8163754 ( 0.46%) 82.23
ipsec 184 ( 0.01%) 18072 ( 0.00%) 98.22
ip6 588 ( 0.02%) 94470 ( 0.01%) 160.66
other 35577 ( 0.99%) 14669620 ( 0.83%) 412.33
frag 18 ( 0.00%) 1080 ( 0.00%) 60.00
tcpdump file: 200501070415.dump.gz (101.38 MB)