Traffic Trace Info
DumpFile: 200501071015.dump
FileSize: 342.24MB
Id: 200501071015
StartTime: Fri Jan 7 10:15:00 2005
EndTime: Fri Jan 7 10:30:00 2005
TotalTime: 900.15 seconds
TotalCapSize: 266.10MB CapLen: 96 bytes
# of packets: 4989375 (2113.29MB)
AvgRate: 19.69Mbps stddev:2.46M
IP flow (unique src/dst pair) Information
# of flows: 362554 (avg. 13.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.3% 1.6% 1.4% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 255200
Top 10 bandwidth usage (bytes/total in %):
23.5% 7.7% 4.5% 4.5% 3.0% 2.8% 2.6% 2.4% 2.0% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501071015.pktlen.png)
detailed numbers
[ 16- 31]: 23292
[ 32- 63]: 1720882
[ 64- 127]: 1375662
[ 128- 255]: 284459
[ 256- 511]: 175970
[ 512- 1023]: 240922
[ 1024- 2047]: 1168188
Protocol Breakdown
![[protocol breakdown chart]](200501071015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4989375 (100.00%) 2215944652 (100.00%) 444.13
ip 4932739 ( 98.86%) 2214188493 ( 99.92%) 448.88
tcp 3983844 ( 79.85%) 1991229535 ( 89.86%) 499.83
http(s) 738286 ( 14.80%) 840534194 ( 37.93%) 1138.49
http(c) 1507038 ( 30.20%) 197815318 ( 8.93%) 131.26
squid 1969 ( 0.04%) 475538 ( 0.02%) 241.51
smtp 205411 ( 4.12%) 74184922 ( 3.35%) 361.15
nntp 177 ( 0.00%) 16831 ( 0.00%) 95.09
ftp 35937 ( 0.72%) 9687787 ( 0.44%) 269.58
pop3 2730 ( 0.05%) 456925 ( 0.02%) 167.37
imap 1813 ( 0.04%) 140908 ( 0.01%) 77.72
telnet 522 ( 0.01%) 43495 ( 0.00%) 83.32
ssh 17086 ( 0.34%) 10261773 ( 0.46%) 600.60
dns 667 ( 0.01%) 53051 ( 0.00%) 79.54
bgp 229 ( 0.00%) 116065 ( 0.01%) 506.83
napster 515 ( 0.01%) 50410 ( 0.00%) 97.88
realaud 23 ( 0.00%) 2467 ( 0.00%) 107.26
rtsp 118988 ( 2.38%) 95143699 ( 4.29%) 799.61
icecast 25521 ( 0.51%) 1544960 ( 0.07%) 60.54
other 1307963 ( 26.21%) 760054945 ( 34.30%) 581.10
udp 593556 ( 11.90%) 167510493 ( 7.56%) 282.22
dns 330582 ( 6.63%) 83874547 ( 3.79%) 253.72
realaud 3772 ( 0.08%) 2030413 ( 0.09%) 538.29
quake 11477 ( 0.23%) 772077 ( 0.03%) 67.27
other 244227 ( 4.89%) 80714248 ( 3.64%) 330.49
icmp 133518 ( 2.68%) 10677055 ( 0.48%) 79.97
ipsec 183 ( 0.00%) 17978 ( 0.00%) 98.24
ip6 474 ( 0.01%) 75952 ( 0.00%) 160.24
other 221164 ( 4.43%) 44677480 ( 2.02%) 202.01
frag 18 ( 0.00%) 5738 ( 0.00%) 318.78
tcpdump file: 200501071015.dump.gz (134.05 MB)