Traffic Trace Info
DumpFile: 200501070915.dump
FileSize: 270.91MB
Id: 200501070915
StartTime: Fri Jan 7 09:15:00 2005
EndTime: Fri Jan 7 09:30:00 2005
TotalTime: 899.86 seconds
TotalCapSize: 211.87MB CapLen: 96 bytes
# of packets: 3869067 (1737.30MB)
AvgRate: 16.19Mbps stddev:1.73M
IP flow (unique src/dst pair) Information
# of flows: 370184 (avg. 10.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 1.5% 1.4% 1.1% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 276167
Top 10 bandwidth usage (bytes/total in %):
30.4% 9.0% 6.5% 4.6% 4.0% 3.6% 2.1% 1.9% 1.8% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501070915.pktlen.png)
detailed numbers
[ 16- 31]: 13222
[ 32- 63]: 1232826
[ 64- 127]: 1164994
[ 128- 255]: 142494
[ 256- 511]: 146012
[ 512- 1023]: 183312
[ 1024- 2047]: 986207
Protocol Breakdown
![[protocol breakdown chart]](200501070915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3869067 (100.00%) 1821687362 (100.00%) 470.83
ip 3836728 ( 99.16%) 1820683856 ( 99.94%) 474.54
tcp 3166812 ( 81.85%) 1662334353 ( 91.25%) 524.92
http(s) 588904 ( 15.22%) 692736802 ( 38.03%) 1176.32
http(c) 1093747 ( 28.27%) 139468555 ( 7.66%) 127.51
squid 4161 ( 0.11%) 413755 ( 0.02%) 99.44
smtp 135251 ( 3.50%) 35347144 ( 1.94%) 261.34
nntp 118 ( 0.00%) 10495 ( 0.00%) 88.94
ftp 10731 ( 0.28%) 4860267 ( 0.27%) 452.92
pop3 3910 ( 0.10%) 1619281 ( 0.09%) 414.14
imap 1134 ( 0.03%) 89229 ( 0.00%) 78.69
telnet 270 ( 0.01%) 25876 ( 0.00%) 95.84
ssh 6156 ( 0.16%) 1775398 ( 0.10%) 288.40
dns 1093 ( 0.03%) 89691 ( 0.00%) 82.06
bgp 233 ( 0.01%) 121773 ( 0.01%) 522.63
napster 354 ( 0.01%) 34615 ( 0.00%) 97.78
rtsp 10440 ( 0.27%) 6516601 ( 0.36%) 624.20
icecast 26180 ( 0.68%) 1585532 ( 0.09%) 60.56
hotline 5 ( 0.00%) 462 ( 0.00%) 92.40
other 1273300 ( 32.91%) 777269869 ( 42.67%) 610.44
udp 443910 ( 11.47%) 121464688 ( 6.67%) 273.62
dns 339909 ( 8.79%) 93644437 ( 5.14%) 275.50
realaud 8755 ( 0.23%) 7048746 ( 0.39%) 805.11
halflif 1 ( 0.00%) 74 ( 0.00%) 74.00
quake 12062 ( 0.31%) 784734 ( 0.04%) 65.06
other 81057 ( 2.10%) 19914321 ( 1.09%) 245.68
icmp 113509 ( 2.93%) 9153732 ( 0.50%) 80.64
ipsec 180 ( 0.00%) 17696 ( 0.00%) 98.31
ip6 487 ( 0.01%) 78690 ( 0.00%) 161.58
other 111830 ( 2.89%) 27634697 ( 1.52%) 247.11
frag 14 ( 0.00%) 840 ( 0.00%) 60.00
tcpdump file: 200501070915.dump.gz (105.12 MB)