Traffic Trace Info
DumpFile: 200501070815.dump
FileSize: 234.23MB
Id: 200501070815
StartTime: Fri Jan 7 08:15:00 2005
EndTime: Fri Jan 7 08:30:00 2005
TotalTime: 899.82 seconds
TotalCapSize: 182.96MB CapLen: 96 bytes
# of packets: 3360258 (1896.98MB)
AvgRate: 17.68Mbps stddev:2.81M
IP flow (unique src/dst pair) Information
# of flows: 242733 (avg. 13.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.1% 2.3% 1.8% 1.8% 1.4% 1.2% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 170580
Top 10 bandwidth usage (bytes/total in %):
31.4% 6.7% 6.7% 6.0% 4.7% 4.6% 4.1% 3.5% 3.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070815.pktlen.png)
detailed numbers
[ 16- 31]: 10734
[ 32- 63]: 887837
[ 64- 127]: 900493
[ 128- 255]: 165816
[ 256- 511]: 131880
[ 512- 1023]: 111973
[ 1024- 2047]: 1151525
Protocol Breakdown
![[protocol breakdown chart]](200501070815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3360258 (100.00%) 1989129104 (100.00%) 591.96
ip 3334757 ( 99.24%) 1988339501 ( 99.96%) 596.25
tcp 2718721 ( 80.91%) 1842708531 ( 92.64%) 677.79
http(s) 633349 ( 18.85%) 816814915 ( 41.06%) 1289.68
http(c) 633940 ( 18.87%) 67619679 ( 3.40%) 106.67
squid 11093 ( 0.33%) 975296 ( 0.05%) 87.92
smtp 120014 ( 3.57%) 27006951 ( 1.36%) 225.03
nntp 83 ( 0.00%) 7994 ( 0.00%) 96.31
ftp 13727 ( 0.41%) 1055540 ( 0.05%) 76.90
pop3 10476 ( 0.31%) 5906770 ( 0.30%) 563.84
imap 713 ( 0.02%) 56167 ( 0.00%) 78.78
telnet 72 ( 0.00%) 6801 ( 0.00%) 94.46
ssh 1486 ( 0.04%) 136958 ( 0.01%) 92.17
dns 419 ( 0.01%) 29985 ( 0.00%) 71.56
bgp 228 ( 0.01%) 118118 ( 0.01%) 518.06
napster 1097 ( 0.03%) 117300 ( 0.01%) 106.93
rtsp 23138 ( 0.69%) 5179243 ( 0.26%) 223.84
icecast 28740 ( 0.86%) 1759252 ( 0.09%) 61.21
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 1232167 ( 36.67%) 915645320 ( 46.03%) 743.12
udp 443509 ( 13.20%) 118702945 ( 5.97%) 267.64
dns 297721 ( 8.86%) 74446908 ( 3.74%) 250.06
realaud 10315 ( 0.31%) 7033710 ( 0.35%) 681.89
halflif 12 ( 0.00%) 720 ( 0.00%) 60.00
starcra 1 ( 0.00%) 419 ( 0.00%) 419.00
quake 7277 ( 0.22%) 487127 ( 0.02%) 66.94
other 125378 ( 3.73%) 36420149 ( 1.83%) 290.48
icmp 92603 ( 2.76%) 7712601 ( 0.39%) 83.29
ipsec 185 ( 0.01%) 18058 ( 0.00%) 97.61
ip6 437 ( 0.01%) 72919 ( 0.00%) 166.86
other 79302 ( 2.36%) 19124447 ( 0.96%) 241.16
frag 9933 ( 0.30%) 10232050 ( 0.51%) 1030.11
tcpdump file: 200501070815.dump.gz (89.40 MB)