Traffic Trace Info
DumpFile: 200501070900.dump
FileSize: 259.75MB
Id: 200501070900
StartTime: Fri Jan 7 09:00:01 2005
EndTime: Fri Jan 7 09:15:00 2005
TotalTime: 899.30 seconds
TotalCapSize: 203.24MB CapLen: 96 bytes
# of packets: 3703439 (1837.23MB)
AvgRate: 17.14Mbps stddev:2.94M
IP flow (unique src/dst pair) Information
# of flows: 311151 (avg. 11.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.1% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 218678
Top 10 bandwidth usage (bytes/total in %):
30.4% 8.5% 5.7% 5.3% 4.4% 3.9% 3.5% 3.4% 3.0% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070900.pktlen.png)
detailed numbers
[ 16- 31]: 12436
[ 32- 63]: 1155083
[ 64- 127]: 1029455
[ 128- 255]: 135639
[ 256- 511]: 140957
[ 512- 1023]: 152050
[ 1024- 2047]: 1077819
Protocol Breakdown
![[protocol breakdown chart]](200501070900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3703439 (100.00%) 1926472470 (100.00%) 520.18
ip 3673302 ( 99.19%) 1925538050 ( 99.95%) 524.20
tcp 3089057 ( 83.41%) 1789731689 ( 92.90%) 579.38
http(s) 677895 ( 18.30%) 828880338 ( 43.03%) 1222.73
http(c) 986999 ( 26.65%) 123386467 ( 6.40%) 125.01
squid 2282 ( 0.06%) 251891 ( 0.01%) 110.38
smtp 122910 ( 3.32%) 26155414 ( 1.36%) 212.80
nntp 76 ( 0.00%) 6680 ( 0.00%) 87.89
ftp 9812 ( 0.26%) 850388 ( 0.04%) 86.67
pop3 2384 ( 0.06%) 310140 ( 0.02%) 130.09
imap 1055 ( 0.03%) 83449 ( 0.00%) 79.10
telnet 105 ( 0.00%) 8708 ( 0.00%) 82.93
ssh 4311 ( 0.12%) 560766 ( 0.03%) 130.08
dns 784 ( 0.02%) 61861 ( 0.00%) 78.90
bgp 244 ( 0.01%) 121552 ( 0.01%) 498.16
napster 474 ( 0.01%) 129827 ( 0.01%) 273.90
rtsp 10255 ( 0.28%) 5976031 ( 0.31%) 582.74
icecast 19936 ( 0.54%) 1206690 ( 0.06%) 60.53
other 1239365 ( 33.47%) 801388429 ( 41.60%) 646.61
udp 412346 ( 11.13%) 107115368 ( 5.56%) 259.77
dns 312830 ( 8.45%) 79195137 ( 4.11%) 253.16
realaud 8775 ( 0.24%) 7323573 ( 0.38%) 834.60
halflif 20 ( 0.00%) 1200 ( 0.00%) 60.00
quake 8017 ( 0.22%) 523390 ( 0.03%) 65.29
other 80760 ( 2.18%) 20005864 ( 1.04%) 247.72
icmp 101565 ( 2.74%) 8374698 ( 0.43%) 82.46
ipsec 179 ( 0.00%) 17482 ( 0.00%) 97.66
ip6 525 ( 0.01%) 82414 ( 0.00%) 156.98
other 69630 ( 1.88%) 20216399 ( 1.05%) 290.34
frag 258 ( 0.01%) 15480 ( 0.00%) 60.00
tcpdump file: 200501070900.dump.gz (99.52 MB)