Traffic Trace Info
DumpFile: 200501070430.dump
FileSize: 245.25MB
Id: 200501070430
StartTime: Fri Jan 7 04:30:00 2005
EndTime: Fri Jan 7 04:45:00 2005
TotalTime: 900.01 seconds
TotalCapSize: 191.61MB CapLen: 96 bytes
# of packets: 3515601 (1601.80MB)
AvgRate: 14.93Mbps stddev:0.84M
IP flow (unique src/dst pair) Information
# of flows: 405419 (avg. 8.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.5% 1.4% 1.3% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 297959
Top 10 bandwidth usage (bytes/total in %):
37.3% 15.3% 3.9% 2.4% 2.4% 2.1% 2.0% 1.9% 1.7% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070430.pktlen.png)
detailed numbers
[ 16- 31]: 10980
[ 32- 63]: 1219326
[ 64- 127]: 920885
[ 128- 255]: 179754
[ 256- 511]: 122595
[ 512- 1023]: 142026
[ 1024- 2047]: 920035
Protocol Breakdown
![[protocol breakdown chart]](200501070430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3515601 (100.00%) 1679610464 (100.00%) 477.76
ip 3489407 ( 99.25%) 1678799014 ( 99.95%) 481.11
tcp 2865667 ( 81.51%) 1528414857 ( 91.00%) 533.35
http(s) 454751 ( 12.94%) 547261639 ( 32.58%) 1203.43
http(c) 574098 ( 16.33%) 49498415 ( 2.95%) 86.22
squid 2146 ( 0.06%) 1073174 ( 0.06%) 500.08
smtp 119552 ( 3.40%) 21362014 ( 1.27%) 178.68
nntp 92 ( 0.00%) 8117 ( 0.00%) 88.23
ftp 13111 ( 0.37%) 858420 ( 0.05%) 65.47
pop3 1188 ( 0.03%) 164017 ( 0.01%) 138.06
imap 477 ( 0.01%) 36660 ( 0.00%) 76.86
telnet 71 ( 0.00%) 4914 ( 0.00%) 69.21
ssh 6454 ( 0.18%) 678472 ( 0.04%) 105.12
dns 436 ( 0.01%) 29848 ( 0.00%) 68.46
bgp 409 ( 0.01%) 254087 ( 0.02%) 621.24
napster 1126 ( 0.03%) 128454 ( 0.01%) 114.08
realaud 203 ( 0.01%) 25010 ( 0.00%) 123.20
rtsp 17018 ( 0.48%) 21948245 ( 1.31%) 1289.71
icecast 26503 ( 0.75%) 1858128 ( 0.11%) 70.11
other 1639819 ( 46.64%) 882945073 ( 52.57%) 538.44
udp 483839 ( 13.76%) 124393919 ( 7.41%) 257.10
dns 317708 ( 9.04%) 84975544 ( 5.06%) 267.46
realaud 1786 ( 0.05%) 107160 ( 0.01%) 60.00
halflif 3 ( 0.00%) 537 ( 0.00%) 179.00
everque 8 ( 0.00%) 1061 ( 0.00%) 132.62
unreal 4 ( 0.00%) 316 ( 0.00%) 79.00
quake 7351 ( 0.21%) 469153 ( 0.03%) 63.82
other 154746 ( 4.40%) 38764124 ( 2.31%) 250.50
icmp 92543 ( 2.63%) 7727055 ( 0.46%) 83.50
ipsec 185 ( 0.01%) 18230 ( 0.00%) 98.54
ip6 498 ( 0.01%) 81432 ( 0.00%) 163.52
other 46675 ( 1.33%) 18163521 ( 1.08%) 389.15
frag 18 ( 0.00%) 1080 ( 0.00%) 60.00
tcpdump file: 200501070430.dump.gz (98.42 MB)