Traffic Trace Info
DumpFile: 200501070600.dump
FileSize: 224.54MB
Id: 200501070600
StartTime: Fri Jan 7 06:00:00 2005
EndTime: Fri Jan 7 06:15:00 2005
TotalTime: 900.06 seconds
TotalCapSize: 175.51MB CapLen: 96 bytes
# of packets: 3212790 (1672.96MB)
AvgRate: 15.59Mbps stddev:2.27M
IP flow (unique src/dst pair) Information
# of flows: 319117 (avg. 10.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.6% 3.8% 3.1% 1.3% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 242708
Top 10 bandwidth usage (bytes/total in %):
32.6% 12.2% 11.1% 10.9% 4.7% 4.1% 4.1% 4.0% 3.2% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070600.pktlen.png)
detailed numbers
[ 16- 31]: 9321
[ 32- 63]: 916393
[ 64- 127]: 865212
[ 128- 255]: 159997
[ 256- 511]: 148150
[ 512- 1023]: 122607
[ 1024- 2047]: 991110
Protocol Breakdown
![[protocol breakdown chart]](200501070600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3212790 (100.00%) 1754230712 (100.00%) 546.01
ip 3190498 ( 99.31%) 1753539990 ( 99.96%) 549.61
tcp 2577625 ( 80.23%) 1605855527 ( 91.54%) 623.00
http(s) 528802 ( 16.46%) 680221547 ( 38.78%) 1286.34
http(c) 527084 ( 16.41%) 45279700 ( 2.58%) 85.91
squid 1628 ( 0.05%) 233080 ( 0.01%) 143.17
smtp 121062 ( 3.77%) 27542923 ( 1.57%) 227.51
nntp 72 ( 0.00%) 6368 ( 0.00%) 88.44
ftp 8363 ( 0.26%) 1504194 ( 0.09%) 179.86
pop3 1237 ( 0.04%) 362068 ( 0.02%) 292.70
imap 381 ( 0.01%) 29604 ( 0.00%) 77.70
telnet 75 ( 0.00%) 6106 ( 0.00%) 81.41
ssh 145634 ( 4.53%) 13530308 ( 0.77%) 92.91
dns 441 ( 0.01%) 31149 ( 0.00%) 70.63
bgp 225 ( 0.01%) 112543 ( 0.01%) 500.19
napster 1144 ( 0.04%) 125973 ( 0.01%) 110.12
realaud 6 ( 0.00%) 879 ( 0.00%) 146.50
rtsp 4309 ( 0.13%) 3990762 ( 0.23%) 926.15
icecast 26818 ( 0.83%) 1832491 ( 0.10%) 68.33
other 1203576 ( 37.46%) 830814934 ( 47.36%) 690.29
udp 456676 ( 14.21%) 118590146 ( 6.76%) 259.68
dns 341902 ( 10.64%) 92856198 ( 5.29%) 271.59
realaud 1786 ( 0.06%) 107160 ( 0.01%) 60.00
starcra 2 ( 0.00%) 214 ( 0.00%) 107.00
everque 4 ( 0.00%) 651 ( 0.00%) 162.75
quake 7389 ( 0.23%) 492552 ( 0.03%) 66.66
cuseeme 2 ( 0.00%) 141 ( 0.00%) 70.50
other 103475 ( 3.22%) 25061203 ( 1.43%) 242.20
icmp 112482 ( 3.50%) 9632503 ( 0.55%) 85.64
ipsec 182 ( 0.01%) 17932 ( 0.00%) 98.53
ip6 478 ( 0.01%) 79515 ( 0.00%) 166.35
other 43055 ( 1.34%) 19364367 ( 1.10%) 449.76
frag 16 ( 0.00%) 960 ( 0.00%) 60.00
tcpdump file: 200501070600.dump.gz (87.69 MB)