Traffic Trace Info
DumpFile: 200501070530.dump
FileSize: 215.97MB
Id: 200501070530
StartTime: Fri Jan 7 05:30:00 2005
EndTime: Fri Jan 7 05:45:00 2005
TotalTime: 899.84 seconds
TotalCapSize: 168.53MB CapLen: 96 bytes
# of packets: 3109306 (1530.47MB)
AvgRate: 14.27Mbps stddev:1.62M
IP flow (unique src/dst pair) Information
# of flows: 338621 (avg. 9.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.4% 1.5% 1.2% 1.2% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 251499
Top 10 bandwidth usage (bytes/total in %):
37.6% 11.0% 5.9% 5.0% 4.4% 3.5% 3.4% 2.6% 2.0% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070530.pktlen.png)
detailed numbers
[ 16- 31]: 8383
[ 32- 63]: 906147
[ 64- 127]: 878067
[ 128- 255]: 139533
[ 256- 511]: 169257
[ 512- 1023]: 128392
[ 1024- 2047]: 879527
Protocol Breakdown
![[protocol breakdown chart]](200501070530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3109306 (100.00%) 1604812720 (100.00%) 516.13
ip 3089335 ( 99.36%) 1604194172 ( 99.96%) 519.27
tcp 2393341 ( 76.97%) 1439937888 ( 89.73%) 601.64
http(s) 462501 ( 14.87%) 559100738 ( 34.84%) 1208.86
http(c) 531938 ( 17.11%) 49986345 ( 3.11%) 93.97
squid 1725 ( 0.06%) 181946 ( 0.01%) 105.48
smtp 127390 ( 4.10%) 32263131 ( 2.01%) 253.26
nntp 73 ( 0.00%) 6556 ( 0.00%) 89.81
ftp 9751 ( 0.31%) 954684 ( 0.06%) 97.91
pop3 900 ( 0.03%) 164975 ( 0.01%) 183.31
imap 316 ( 0.01%) 24611 ( 0.00%) 77.88
telnet 70 ( 0.00%) 4707 ( 0.00%) 67.24
ssh 30394 ( 0.98%) 2290074 ( 0.14%) 75.35
dns 930 ( 0.03%) 76236 ( 0.00%) 81.97
bgp 238 ( 0.01%) 124937 ( 0.01%) 524.95
napster 1221 ( 0.04%) 136302 ( 0.01%) 111.63
rtsp 4305 ( 0.14%) 3977089 ( 0.25%) 923.83
icecast 27460 ( 0.88%) 2309107 ( 0.14%) 84.09
other 1188662 ( 38.23%) 788149832 ( 49.11%) 663.06
udp 507177 ( 16.31%) 135036731 ( 8.41%) 266.25
dns 332132 ( 10.68%) 90284293 ( 5.63%) 271.83
realaud 1789 ( 0.06%) 107340 ( 0.01%) 60.00
halflif 9 ( 0.00%) 542 ( 0.00%) 60.22
everque 5 ( 0.00%) 654 ( 0.00%) 130.80
quake 10676 ( 0.34%) 723730 ( 0.05%) 67.79
other 160598 ( 5.17%) 43851712 ( 2.73%) 273.05
icmp 118319 ( 3.81%) 9548050 ( 0.59%) 80.70
ipsec 186 ( 0.01%) 18492 ( 0.00%) 99.42
ip6 446 ( 0.01%) 74337 ( 0.00%) 166.67
other 69866 ( 2.25%) 19578674 ( 1.22%) 280.23
frag 26 ( 0.00%) 10155 ( 0.00%) 390.58
tcpdump file: 200501070530.dump.gz (84.32 MB)