Traffic Trace Info
DumpFile: 200501070845.dump
FileSize: 246.12MB
Id: 200501070845
StartTime: Fri Jan 7 08:45:00 2005
EndTime: Fri Jan 7 09:00:01 2005
TotalTime: 900.94 seconds
TotalCapSize: 192.57MB CapLen: 96 bytes
# of packets: 3510022 (1862.51MB)
AvgRate: 17.34Mbps stddev:3.33M
IP flow (unique src/dst pair) Information
# of flows: 271191 (avg. 12.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 1.7% 1.6% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 193672
Top 10 bandwidth usage (bytes/total in %):
30.1% 7.8% 7.1% 6.4% 3.7% 3.3% 3.1% 2.9% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070845.pktlen.png)
detailed numbers
[ 16- 31]: 10979
[ 32- 63]: 1043214
[ 64- 127]: 930384
[ 128- 255]: 122573
[ 256- 511]: 142317
[ 512- 1023]: 157715
[ 1024- 2047]: 1102840
Protocol Breakdown
![[protocol breakdown chart]](200501070845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3510022 (100.00%) 1952981883 (100.00%) 556.40
ip 3483273 ( 99.24%) 1952152169 ( 99.96%) 560.44
tcp 2926328 ( 83.37%) 1819887264 ( 93.19%) 621.90
http(s) 703517 ( 20.04%) 871829573 ( 44.64%) 1239.24
http(c) 890269 ( 25.36%) 118906702 ( 6.09%) 133.56
squid 2931 ( 0.08%) 351410 ( 0.02%) 119.89
smtp 109704 ( 3.13%) 21076371 ( 1.08%) 192.12
nntp 79 ( 0.00%) 6676 ( 0.00%) 84.51
ftp 11474 ( 0.33%) 865837 ( 0.04%) 75.46
pop3 3543 ( 0.10%) 388615 ( 0.02%) 109.69
imap 1012 ( 0.03%) 79403 ( 0.00%) 78.46
telnet 84 ( 0.00%) 7719 ( 0.00%) 91.89
ssh 1979 ( 0.06%) 188531 ( 0.01%) 95.27
dns 365 ( 0.01%) 25434 ( 0.00%) 69.68
bgp 224 ( 0.01%) 113960 ( 0.01%) 508.75
napster 409 ( 0.01%) 40813 ( 0.00%) 99.79
realaud 651 ( 0.02%) 46413 ( 0.00%) 71.29
rtsp 17805 ( 0.51%) 12874519 ( 0.66%) 723.08
icecast 26289 ( 0.75%) 1604514 ( 0.08%) 61.03
other 1146911 ( 32.68%) 791171166 ( 40.51%) 689.83
udp 411613 ( 11.73%) 106895625 ( 5.47%) 259.70
dns 307806 ( 8.77%) 78038727 ( 4.00%) 253.53
realaud 9574 ( 0.27%) 6751003 ( 0.35%) 705.14
halflif 4 ( 0.00%) 240 ( 0.00%) 60.00
everque 1 ( 0.00%) 87 ( 0.00%) 87.00
quake 7990 ( 0.23%) 542238 ( 0.03%) 67.86
other 84433 ( 2.41%) 21501882 ( 1.10%) 254.66
icmp 94719 ( 2.70%) 7928168 ( 0.41%) 83.70
ipsec 179 ( 0.01%) 17786 ( 0.00%) 99.36
ip6 448 ( 0.01%) 74221 ( 0.00%) 165.67
other 49986 ( 1.42%) 17349105 ( 0.89%) 347.08
frag 20 ( 0.00%) 1400 ( 0.00%) 70.00
tcpdump file: 200501070845.dump.gz (94.01 MB)