Traffic Trace Info
DumpFile: 200501070700.dump
FileSize: 234.08MB
Id: 200501070700
StartTime: Fri Jan 7 07:00:01 2005
EndTime: Fri Jan 7 07:15:00 2005
TotalTime: 899.09 seconds
TotalCapSize: 182.39MB CapLen: 96 bytes
# of packets: 3386948 (1765.45MB)
AvgRate: 16.47Mbps stddev:2.10M
IP flow (unique src/dst pair) Information
# of flows: 288167 (avg. 11.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.3% 3.6% 2.8% 2.4% 1.7% 1.3% 1.3% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 211024
Top 10 bandwidth usage (bytes/total in %):
34.3% 10.6% 10.5% 9.1% 5.1% 4.2% 4.0% 3.8% 3.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070700.pktlen.png)
detailed numbers
[ 16- 31]: 10877
[ 32- 63]: 1038793
[ 64- 127]: 903652
[ 128- 255]: 123836
[ 256- 511]: 128693
[ 512- 1023]: 122307
[ 1024- 2047]: 1058790
Protocol Breakdown
![[protocol breakdown chart]](200501070700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3386948 (100.00%) 1851212290 (100.00%) 546.57
ip 3361407 ( 99.25%) 1850421889 ( 99.96%) 550.49
tcp 2752772 ( 81.28%) 1715587026 ( 92.67%) 623.22
http(s) 557768 ( 16.47%) 705364449 ( 38.10%) 1264.62
http(c) 629280 ( 18.58%) 58983907 ( 3.19%) 93.73
squid 2026 ( 0.06%) 180964 ( 0.01%) 89.32
smtp 124094 ( 3.66%) 28091334 ( 1.52%) 226.37
nntp 70 ( 0.00%) 6077 ( 0.00%) 86.81
ftp 13387 ( 0.40%) 1536464 ( 0.08%) 114.77
pop3 1094 ( 0.03%) 308031 ( 0.02%) 281.56
imap 557 ( 0.02%) 43754 ( 0.00%) 78.55
telnet 81 ( 0.00%) 5501 ( 0.00%) 67.91
ssh 2585 ( 0.08%) 458625 ( 0.02%) 177.42
dns 404 ( 0.01%) 27192 ( 0.00%) 67.31
bgp 223 ( 0.01%) 111672 ( 0.01%) 500.77
napster 1123 ( 0.03%) 123026 ( 0.01%) 109.55
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 4262 ( 0.13%) 3976657 ( 0.21%) 933.05
icecast 51895 ( 1.53%) 3172230 ( 0.17%) 61.13
other 1355851 ( 40.03%) 912921933 ( 49.31%) 673.32
udp 407252 ( 12.02%) 104698190 ( 5.66%) 257.08
dns 300568 ( 8.87%) 79515237 ( 4.30%) 264.55
realaud 1772 ( 0.05%) 106320 ( 0.01%) 60.00
starcra 1 ( 0.00%) 419 ( 0.00%) 419.00
everque 2 ( 0.00%) 160 ( 0.00%) 80.00
quake 11753 ( 0.35%) 808086 ( 0.04%) 68.76
other 91300 ( 2.70%) 24204783 ( 1.31%) 265.11
icmp 90431 ( 2.67%) 7548418 ( 0.41%) 83.47
ipsec 184 ( 0.01%) 18120 ( 0.00%) 98.48
ip6 490 ( 0.01%) 79294 ( 0.00%) 161.82
other 110278 ( 3.26%) 22490841 ( 1.21%) 203.95
frag 12 ( 0.00%) 720 ( 0.00%) 60.00
tcpdump file: 200501070700.dump.gz (90.44 MB)