Traffic Trace Info
DumpFile: 200501070515.dump
FileSize: 214.97MB
Id: 200501070515
StartTime: Fri Jan 7 05:15:00 2005
EndTime: Fri Jan 7 05:30:00 2005
TotalTime: 900.00 seconds
TotalCapSize: 168.08MB CapLen: 96 bytes
# of packets: 3073198 (1503.85MB)
AvgRate: 14.02Mbps stddev:0.81M
IP flow (unique src/dst pair) Information
# of flows: 343992 (avg. 8.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 1.4% 1.2% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 249915
Top 10 bandwidth usage (bytes/total in %):
36.3% 13.2% 5.0% 4.0% 3.7% 3.5% 2.5% 2.4% 2.0% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070515.pktlen.png)
detailed numbers
[ 16- 31]: 8322
[ 32- 63]: 998859
[ 64- 127]: 823558
[ 128- 255]: 128219
[ 256- 511]: 116996
[ 512- 1023]: 111162
[ 1024- 2047]: 886082
Protocol Breakdown
![[protocol breakdown chart]](200501070515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3073198 (100.00%) 1576897159 (100.00%) 513.11
ip 3053406 ( 99.36%) 1576283993 ( 99.96%) 516.24
tcp 2481279 ( 80.74%) 1449262702 ( 91.91%) 584.08
http(s) 479421 ( 15.60%) 579878647 ( 36.77%) 1209.54
http(c) 582871 ( 18.97%) 49670180 ( 3.15%) 85.22
squid 2383 ( 0.08%) 792298 ( 0.05%) 332.48
smtp 121441 ( 3.95%) 28553702 ( 1.81%) 235.12
nntp 89 ( 0.00%) 7885 ( 0.00%) 88.60
ftp 6403 ( 0.21%) 572419 ( 0.04%) 89.40
pop3 1257 ( 0.04%) 355328 ( 0.02%) 282.68
imap 290 ( 0.01%) 22441 ( 0.00%) 77.38
telnet 90 ( 0.00%) 5919 ( 0.00%) 65.77
ssh 6501 ( 0.21%) 782022 ( 0.05%) 120.29
dns 660 ( 0.02%) 54069 ( 0.00%) 81.92
bgp 222 ( 0.01%) 110059 ( 0.01%) 495.76
napster 1160 ( 0.04%) 128773 ( 0.01%) 111.01
rtsp 10912 ( 0.36%) 13463057 ( 0.85%) 1233.78
icecast 27227 ( 0.89%) 1840655 ( 0.12%) 67.60
other 1234564 ( 40.17%) 772827765 ( 49.01%) 625.99
udp 409903 ( 13.34%) 103940618 ( 6.59%) 253.57
dns 312125 ( 10.16%) 81864910 ( 5.19%) 262.28
realaud 1796 ( 0.06%) 108110 ( 0.01%) 60.19
halflif 2 ( 0.00%) 146 ( 0.00%) 73.00
everque 2 ( 0.00%) 160 ( 0.00%) 80.00
quake 9771 ( 0.32%) 661120 ( 0.04%) 67.66
other 84356 ( 2.74%) 21213955 ( 1.35%) 251.48
icmp 107434 ( 3.50%) 8732203 ( 0.55%) 81.28
ipsec 267 ( 0.01%) 59414 ( 0.00%) 222.52
ip6 551 ( 0.02%) 89336 ( 0.01%) 162.13
other 53972 ( 1.76%) 14199720 ( 0.90%) 263.09
frag 800 ( 0.03%) 1120164 ( 0.07%) 1400.20
tcpdump file: 200501070515.dump.gz (85.31 MB)