Traffic Trace Info
DumpFile: 200501071030.dump
FileSize: 375.01MB
Id: 200501071030
StartTime: Fri Jan 7 10:30:00 2005
EndTime: Fri Jan 7 10:45:00 2005
TotalTime: 900.27 seconds
TotalCapSize: 292.14MB CapLen: 96 bytes
# of packets: 5430747 (2282.30MB)
AvgRate: 21.26Mbps stddev:2.80M
IP flow (unique src/dst pair) Information
# of flows: 396034 (avg. 13.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 2.0% 1.7% 1.4% 1.1% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 273719
Top 10 bandwidth usage (bytes/total in %):
21.4% 6.8% 6.8% 6.6% 3.6% 2.3% 2.2% 2.1% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501071030.pktlen.png)
detailed numbers
[ 16- 31]: 27883
[ 32- 63]: 1847970
[ 64- 127]: 1585967
[ 128- 255]: 226199
[ 256- 511]: 195767
[ 512- 1023]: 297600
[ 1024- 2047]: 1249361
Protocol Breakdown
![[protocol breakdown chart]](200501071030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5430747 (100.00%) 2393166880 (100.00%) 440.67
ip 5364559 ( 98.78%) 2391117970 ( 99.91%) 445.72
tcp 4432510 ( 81.62%) 2160190001 ( 90.26%) 487.35
http(s) 821845 ( 15.13%) 958711789 ( 40.06%) 1166.54
http(c) 1756644 ( 32.35%) 222846244 ( 9.31%) 126.86
squid 10772 ( 0.20%) 7236163 ( 0.30%) 671.76
smtp 168213 ( 3.10%) 70857950 ( 2.96%) 421.24
nntp 273 ( 0.01%) 31446 ( 0.00%) 115.19
ftp 34274 ( 0.63%) 6782990 ( 0.28%) 197.90
pop3 9249 ( 0.17%) 5039774 ( 0.21%) 544.90
imap 1759 ( 0.03%) 146056 ( 0.01%) 83.03
telnet 442 ( 0.01%) 76434 ( 0.00%) 172.93
ssh 16989 ( 0.31%) 10237845 ( 0.43%) 602.62
dns 990 ( 0.02%) 80633 ( 0.00%) 81.45
bgp 224 ( 0.00%) 110828 ( 0.00%) 494.77
napster 862 ( 0.02%) 70115 ( 0.00%) 81.34
realaud 3 ( 0.00%) 182 ( 0.00%) 60.67
rtsp 125626 ( 2.31%) 73663517 ( 3.08%) 586.37
icecast 23023 ( 0.42%) 1407839 ( 0.06%) 61.15
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1438318 ( 26.48%) 802106377 ( 33.52%) 557.67
udp 584921 ( 10.77%) 175182977 ( 7.32%) 299.50
dns 368904 ( 6.79%) 107764500 ( 4.50%) 292.12
realaud 9419 ( 0.17%) 4951424 ( 0.21%) 525.68
halflif 10 ( 0.00%) 600 ( 0.00%) 60.00
quake 10699 ( 0.20%) 719951 ( 0.03%) 67.29
cuseeme 1 ( 0.00%) 84 ( 0.00%) 84.00
other 192287 ( 3.54%) 61623789 ( 2.57%) 320.48
icmp 98232 ( 1.81%) 8197899 ( 0.34%) 83.45
ipsec 177 ( 0.00%) 17598 ( 0.00%) 99.42
ip6 514 ( 0.01%) 81201 ( 0.00%) 157.98
other 248205 ( 4.57%) 47448294 ( 1.98%) 191.17
frag 15 ( 0.00%) 900 ( 0.00%) 60.00
tcpdump file: 200501071030.dump.gz (145.19 MB)