Traffic Trace Info
DumpFile: 200501070800.dump
FileSize: 235.72MB
Id: 200501070800
StartTime: Fri Jan 7 08:00:00 2005
EndTime: Fri Jan 7 08:15:00 2005
TotalTime: 899.64 seconds
TotalCapSize: 183.81MB CapLen: 96 bytes
# of packets: 3401508 (1895.42MB)
AvgRate: 17.67Mbps stddev:2.55M
IP flow (unique src/dst pair) Information
# of flows: 232876 (avg. 14.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 6.6% 3.3% 2.1% 1.3% 1.1% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 166629
Top 10 bandwidth usage (bytes/total in %):
30.8% 8.7% 7.8% 7.6% 6.8% 6.8% 3.9% 3.4% 3.4% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070800.pktlen.png)
detailed numbers
[ 16- 31]: 10941
[ 32- 63]: 941035
[ 64- 127]: 906207
[ 128- 255]: 137275
[ 256- 511]: 131878
[ 512- 1023]: 124023
[ 1024- 2047]: 1150149
Protocol Breakdown
![[protocol breakdown chart]](200501070800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3401508 (100.00%) 1987492775 (100.00%) 584.30
ip 3375647 ( 99.24%) 1986692293 ( 99.96%) 588.54
tcp 2774214 ( 81.56%) 1854529859 ( 93.31%) 668.49
http(s) 662033 ( 19.46%) 850491239 ( 42.79%) 1284.67
http(c) 638930 ( 18.78%) 59279135 ( 2.98%) 92.78
squid 7398 ( 0.22%) 712003 ( 0.04%) 96.24
smtp 119840 ( 3.52%) 26633129 ( 1.34%) 222.24
nntp 79 ( 0.00%) 7908 ( 0.00%) 100.10
ftp 16788 ( 0.49%) 1230680 ( 0.06%) 73.31
pop3 1105 ( 0.03%) 199470 ( 0.01%) 180.52
imap 815 ( 0.02%) 64114 ( 0.00%) 78.67
telnet 86 ( 0.00%) 8006 ( 0.00%) 93.09
ssh 1113 ( 0.03%) 77219 ( 0.00%) 69.38
dns 974 ( 0.03%) 79454 ( 0.00%) 81.57
bgp 228 ( 0.01%) 115759 ( 0.01%) 507.71
napster 1081 ( 0.03%) 113544 ( 0.01%) 105.04
rtsp 15287 ( 0.45%) 4678061 ( 0.24%) 306.02
icecast 26343 ( 0.77%) 1607992 ( 0.08%) 61.04
other 1273905 ( 37.45%) 908952192 ( 45.73%) 713.52
udp 401114 ( 11.79%) 101289670 ( 5.10%) 252.52
dns 290511 ( 8.54%) 70300797 ( 3.54%) 241.99
realaud 10466 ( 0.31%) 6829413 ( 0.34%) 652.53
halflif 1 ( 0.00%) 87 ( 0.00%) 87.00
quake 7569 ( 0.22%) 512183 ( 0.03%) 67.67
other 90636 ( 2.66%) 23581469 ( 1.19%) 260.18
icmp 92684 ( 2.72%) 7782244 ( 0.39%) 83.97
ipsec 181 ( 0.01%) 17778 ( 0.00%) 98.22
ip6 448 ( 0.01%) 75422 ( 0.00%) 168.35
other 107006 ( 3.15%) 22997320 ( 1.16%) 214.92
frag 19 ( 0.00%) 2408 ( 0.00%) 126.74
tcpdump file: 200501070800.dump.gz (89.85 MB)