Traffic Trace Info
DumpFile: 200501071000.dump
FileSize: 313.79MB
Id: 200501071000
StartTime: Fri Jan 7 10:00:00 2005
EndTime: Fri Jan 7 10:15:00 2005
TotalTime: 900.21 seconds
TotalCapSize: 244.35MB CapLen: 96 bytes
# of packets: 4550439 (1957.00MB)
AvgRate: 18.24Mbps stddev:2.05M
IP flow (unique src/dst pair) Information
# of flows: 403771 (avg. 11.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.7% 1.5% 1.2% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 287300
Top 10 bandwidth usage (bytes/total in %):
27.7% 5.0% 4.0% 2.7% 2.1% 2.1% 1.9% 1.8% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501071000.pktlen.png)
detailed numbers
[ 16- 31]: 19376
[ 32- 63]: 1487839
[ 64- 127]: 1314184
[ 128- 255]: 188694
[ 256- 511]: 204463
[ 512- 1023]: 273361
[ 1024- 2047]: 1062522
Protocol Breakdown
![[protocol breakdown chart]](200501071000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4550439 (100.00%) 2052060081 (100.00%) 450.96
ip 4504963 ( 99.00%) 2050653079 ( 99.93%) 455.20
tcp 3603452 ( 79.19%) 1787099530 ( 87.09%) 495.94
http(s) 611400 ( 13.44%) 685943106 ( 33.43%) 1121.92
http(c) 1236542 ( 27.17%) 174300305 ( 8.49%) 140.96
squid 4584 ( 0.10%) 2340338 ( 0.11%) 510.54
smtp 232875 ( 5.12%) 59735642 ( 2.91%) 256.51
nntp 162 ( 0.00%) 14848 ( 0.00%) 91.65
ftp 20101 ( 0.44%) 11254983 ( 0.55%) 559.92
pop3 8392 ( 0.18%) 740697 ( 0.04%) 88.26
imap 1984 ( 0.04%) 208079 ( 0.01%) 104.88
telnet 636 ( 0.01%) 51913 ( 0.00%) 81.62
ssh 18788 ( 0.41%) 10795555 ( 0.53%) 574.60
dns 513 ( 0.01%) 36755 ( 0.00%) 71.65
bgp 219 ( 0.00%) 109675 ( 0.01%) 500.80
napster 351 ( 0.01%) 35698 ( 0.00%) 101.70
rtsp 51960 ( 1.14%) 37697644 ( 1.84%) 725.51
icecast 26118 ( 0.57%) 1581581 ( 0.08%) 60.56
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 1373356 ( 30.18%) 801725338 ( 39.07%) 583.77
udp 596083 ( 13.10%) 211684840 ( 10.32%) 355.13
dns 412437 ( 9.06%) 126316136 ( 6.16%) 306.27
realaud 9050 ( 0.20%) 7057354 ( 0.34%) 779.82
quake 10505 ( 0.23%) 686279 ( 0.03%) 65.33
other 161613 ( 3.55%) 77540700 ( 3.78%) 479.79
icmp 94052 ( 2.07%) 7991198 ( 0.39%) 84.97
ipsec 179 ( 0.00%) 17542 ( 0.00%) 98.00
ip6 534 ( 0.01%) 83984 ( 0.00%) 157.27
other 210663 ( 4.63%) 43775985 ( 2.13%) 207.80
frag 19 ( 0.00%) 1140 ( 0.00%) 60.00
tcpdump file: 200501071000.dump.gz (123.04 MB)