Traffic Trace Info
DumpFile: 200501070615.dump
FileSize: 218.32MB
Id: 200501070615
StartTime: Fri Jan 7 06:15:00 2005
EndTime: Fri Jan 7 06:30:00 2005
TotalTime: 899.95 seconds
TotalCapSize: 170.71MB CapLen: 96 bytes
# of packets: 3119957 (1564.39MB)
AvgRate: 14.58Mbps stddev:1.39M
IP flow (unique src/dst pair) Information
# of flows: 262873 (avg. 11.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.3% 2.6% 1.5% 1.5% 1.4% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 191635
Top 10 bandwidth usage (bytes/total in %):
35.5% 12.5% 5.0% 4.7% 4.4% 4.4% 3.4% 3.2% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070615.pktlen.png)
detailed numbers
[ 16- 31]: 8321
[ 32- 63]: 893945
[ 64- 127]: 878205
[ 128- 255]: 145518
[ 256- 511]: 136264
[ 512- 1023]: 144927
[ 1024- 2047]: 912777
Protocol Breakdown
![[protocol breakdown chart]](200501070615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3119957 (100.00%) 1640385120 (100.00%) 525.77
ip 3099749 ( 99.35%) 1639758368 ( 99.96%) 529.00
tcp 2521338 ( 80.81%) 1488842966 ( 90.76%) 590.50
http(s) 443067 ( 14.20%) 537128148 ( 32.74%) 1212.30
http(c) 572050 ( 18.34%) 51125287 ( 3.12%) 89.37
squid 2482 ( 0.08%) 1037351 ( 0.06%) 417.95
smtp 126762 ( 4.06%) 26955573 ( 1.64%) 212.65
nntp 77 ( 0.00%) 6738 ( 0.00%) 87.51
ftp 14823 ( 0.48%) 3726773 ( 0.23%) 251.42
pop3 1230 ( 0.04%) 379166 ( 0.02%) 308.27
imap 1317 ( 0.04%) 99117 ( 0.01%) 75.26
telnet 64 ( 0.00%) 4276 ( 0.00%) 66.81
ssh 85822 ( 2.75%) 16788654 ( 1.02%) 195.62
dns 507 ( 0.02%) 50347 ( 0.00%) 99.30
bgp 234 ( 0.01%) 121301 ( 0.01%) 518.38
napster 1145 ( 0.04%) 122006 ( 0.01%) 106.56
rtsp 5845 ( 0.19%) 4135372 ( 0.25%) 707.51
icecast 26217 ( 0.84%) 2081715 ( 0.13%) 79.40
other 1233652 ( 39.54%) 844874963 ( 51.50%) 684.86
udp 433395 ( 13.89%) 124267919 ( 7.58%) 286.73
dns 335068 ( 10.74%) 96196016 ( 5.86%) 287.09
realaud 1784 ( 0.06%) 107040 ( 0.01%) 60.00
halflif 7 ( 0.00%) 780 ( 0.00%) 111.43
quake 5991 ( 0.19%) 431632 ( 0.03%) 72.05
cuseeme 8 ( 0.00%) 512 ( 0.00%) 64.00
other 88813 ( 2.85%) 27452470 ( 1.67%) 309.10
icmp 102425 ( 3.28%) 8450041 ( 0.52%) 82.50
ipsec 183 ( 0.01%) 17870 ( 0.00%) 97.65
ip6 468 ( 0.02%) 77387 ( 0.00%) 165.36
other 41940 ( 1.34%) 18102185 ( 1.10%) 431.62
frag 3049 ( 0.10%) 4324910 ( 0.26%) 1418.47
tcpdump file: 200501070615.dump.gz (86.46 MB)