Traffic Trace Info
DumpFile: 200501070645.dump
FileSize: 234.91MB
Id: 200501070645
StartTime: Fri Jan 7 06:45:00 2005
EndTime: Fri Jan 7 07:00:01 2005
TotalTime: 900.90 seconds
TotalCapSize: 183.63MB CapLen: 96 bytes
# of packets: 3360483 (1636.29MB)
AvgRate: 15.24Mbps stddev:0.82M
IP flow (unique src/dst pair) Information
# of flows: 369200 (avg. 9.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.8% 3.0% 2.1% 1.7% 1.4% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 282070
Top 10 bandwidth usage (bytes/total in %):
34.8% 10.7% 7.3% 4.9% 4.8% 4.5% 4.0% 3.7% 3.2% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070645.pktlen.png)
detailed numbers
[ 16- 31]: 10100
[ 32- 63]: 973875
[ 64- 127]: 1047451
[ 128- 255]: 125532
[ 256- 511]: 130938
[ 512- 1023]: 99747
[ 1024- 2047]: 972840
Protocol Breakdown
![[protocol breakdown chart]](200501070645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3360483 (100.00%) 1715770901 (100.00%) 510.57
ip 3336157 ( 99.28%) 1715016834 ( 99.96%) 514.07
tcp 2684818 ( 79.89%) 1589293432 ( 92.63%) 591.96
http(s) 483282 ( 14.38%) 582692022 ( 33.96%) 1205.70
http(c) 606491 ( 18.05%) 63224151 ( 3.68%) 104.25
squid 1491 ( 0.04%) 313389 ( 0.02%) 210.19
smtp 127513 ( 3.79%) 27426201 ( 1.60%) 215.09
nntp 76 ( 0.00%) 6593 ( 0.00%) 86.75
ftp 27527 ( 0.82%) 4720449 ( 0.28%) 171.48
pop3 3495 ( 0.10%) 3730282 ( 0.22%) 1067.32
imap 478 ( 0.01%) 37144 ( 0.00%) 77.71
telnet 67 ( 0.00%) 4487 ( 0.00%) 66.97
ssh 7943 ( 0.24%) 3088101 ( 0.18%) 388.78
dns 1101 ( 0.03%) 87662 ( 0.01%) 79.62
bgp 229 ( 0.01%) 118948 ( 0.01%) 519.42
napster 1136 ( 0.03%) 121915 ( 0.01%) 107.32
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 4863 ( 0.14%) 4028796 ( 0.23%) 828.46
icecast 35143 ( 1.05%) 2615637 ( 0.15%) 74.43
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1376803 ( 40.97%) 896832696 ( 52.27%) 651.39
udp 394220 ( 11.73%) 94727840 ( 5.52%) 240.29
dns 288419 ( 8.58%) 69043434 ( 4.02%) 239.39
realaud 1793 ( 0.05%) 107580 ( 0.01%) 60.00
halflif 6 ( 0.00%) 360 ( 0.00%) 60.00
everque 1 ( 0.00%) 70 ( 0.00%) 70.00
quake 5721 ( 0.17%) 424632 ( 0.02%) 74.22
other 96484 ( 2.87%) 25090623 ( 1.46%) 260.05
icmp 134179 ( 3.99%) 10644800 ( 0.62%) 79.33
ipsec 184 ( 0.01%) 18196 ( 0.00%) 98.89
ip6 472 ( 0.01%) 78085 ( 0.00%) 165.43
other 122284 ( 3.64%) 20254481 ( 1.18%) 165.63
frag 21 ( 0.00%) 4352 ( 0.00%) 207.24
tcpdump file: 200501070645.dump.gz (91.75 MB)