Traffic Trace Info
DumpFile: 200501070830.dump
FileSize: 240.07MB
Id: 200501070830
StartTime: Fri Jan 7 08:30:00 2005
EndTime: Fri Jan 7 08:45:00 2005
TotalTime: 899.96 seconds
TotalCapSize: 188.01MB CapLen: 96 bytes
# of packets: 3411373 (1910.71MB)
AvgRate: 17.81Mbps stddev:3.59M
IP flow (unique src/dst pair) Information
# of flows: 257735 (avg. 13.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 1.9% 1.9% 1.8% 1.7% 1.5% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 184238
Top 10 bandwidth usage (bytes/total in %):
28.7% 10.3% 8.1% 6.6% 5.4% 4.5% 4.5% 4.3% 4.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070830.pktlen.png)
detailed numbers
[ 16- 31]: 10487
[ 32- 63]: 923205
[ 64- 127]: 910000
[ 128- 255]: 142430
[ 256- 511]: 135200
[ 512- 1023]: 141228
[ 1024- 2047]: 1148823
Protocol Breakdown
![[protocol breakdown chart]](200501070830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3411373 (100.00%) 2003528626 (100.00%) 587.31
ip 3385633 ( 99.25%) 2002729850 ( 99.96%) 591.54
tcp 2818458 ( 82.62%) 1863197323 ( 93.00%) 661.07
http(s) 717755 ( 21.04%) 936653016 ( 46.75%) 1304.98
http(c) 747642 ( 21.92%) 84247996 ( 4.20%) 112.68
squid 10204 ( 0.30%) 888822 ( 0.04%) 87.11
smtp 122479 ( 3.59%) 25257840 ( 1.26%) 206.22
nntp 76 ( 0.00%) 6622 ( 0.00%) 87.13
ftp 12305 ( 0.36%) 894079 ( 0.04%) 72.66
pop3 1529 ( 0.04%) 334001 ( 0.02%) 218.44
imap 1021 ( 0.03%) 82222 ( 0.00%) 80.53
telnet 83 ( 0.00%) 8570 ( 0.00%) 103.25
ssh 2573 ( 0.08%) 335935 ( 0.02%) 130.56
dns 400 ( 0.01%) 29479 ( 0.00%) 73.70
bgp 225 ( 0.01%) 111017 ( 0.01%) 493.41
napster 522 ( 0.02%) 94606 ( 0.00%) 181.24
rtsp 11672 ( 0.34%) 4453559 ( 0.22%) 381.56
icecast 27542 ( 0.81%) 1686685 ( 0.08%) 61.24
hotline 5 ( 0.00%) 462 ( 0.00%) 92.40
other 1154078 ( 33.83%) 807827815 ( 40.32%) 699.98
udp 429100 ( 12.58%) 115459617 ( 5.76%) 269.07
dns 316930 ( 9.29%) 84691925 ( 4.23%) 267.23
realaud 9310 ( 0.27%) 7225026 ( 0.36%) 776.05
starcra 2 ( 0.00%) 214 ( 0.00%) 107.00
everque 1 ( 0.00%) 87 ( 0.00%) 87.00
quake 5658 ( 0.17%) 384573 ( 0.02%) 67.97
other 95169 ( 2.79%) 23088683 ( 1.15%) 242.61
icmp 92282 ( 2.71%) 7687132 ( 0.38%) 83.30
ipsec 182 ( 0.01%) 18116 ( 0.00%) 99.54
ip6 465 ( 0.01%) 79258 ( 0.00%) 170.45
other 45146 ( 1.32%) 16288404 ( 0.81%) 360.79
frag 17 ( 0.00%) 994 ( 0.00%) 58.47
tcpdump file: 200501070830.dump.gz (91.18 MB)