Traffic Trace Info
DumpFile: 200501071115.dump
FileSize: 378.22MB
Id: 200501071115
StartTime: Fri Jan 7 11:15:01 2005
EndTime: Fri Jan 7 11:30:00 2005
TotalTime: 899.32 seconds
TotalCapSize: 294.76MB CapLen: 96 bytes
# of packets: 5469220 (2265.90MB)
AvgRate: 21.13Mbps stddev:1.84M
IP flow (unique src/dst pair) Information
# of flows: 315866 (avg. 17.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.5% 1.0% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 206557
Top 10 bandwidth usage (bytes/total in %):
23.0% 3.9% 3.2% 3.0% 2.7% 2.3% 2.0% 1.8% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501071115.pktlen.png)
detailed numbers
[ 16- 31]: 28353
[ 32- 63]: 1645250
[ 64- 127]: 1829571
[ 128- 255]: 241483
[ 256- 511]: 214790
[ 512- 1023]: 266296
[ 1024- 2047]: 1243477
Protocol Breakdown
![[protocol breakdown chart]](200501071115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5469220 (100.00%) 2375965680 (100.00%) 434.42
ip 5401667 ( 98.76%) 2373874007 ( 99.91%) 439.47
tcp 4450066 ( 81.37%) 2175479213 ( 91.56%) 488.86
http(s) 832084 ( 15.21%) 923784440 ( 38.88%) 1110.21
http(c) 1760270 ( 32.19%) 222468925 ( 9.36%) 126.38
squid 13630 ( 0.25%) 9806965 ( 0.41%) 719.51
smtp 171057 ( 3.13%) 63907456 ( 2.69%) 373.60
nntp 202 ( 0.00%) 16571 ( 0.00%) 82.03
ftp 20799 ( 0.38%) 10479823 ( 0.44%) 503.86
pop3 9602 ( 0.18%) 4392308 ( 0.18%) 457.44
imap 1304 ( 0.02%) 102313 ( 0.00%) 78.46
telnet 1354 ( 0.02%) 128857 ( 0.01%) 95.17
ssh 4321 ( 0.08%) 1499108 ( 0.06%) 346.94
dns 764 ( 0.01%) 56105 ( 0.00%) 73.44
bgp 244 ( 0.00%) 134958 ( 0.01%) 553.11
napster 3 ( 0.00%) 200 ( 0.00%) 66.67
rtsp 64902 ( 1.19%) 42519366 ( 1.79%) 655.13
icecast 22937 ( 0.42%) 1432662 ( 0.06%) 62.46
other 1522656 ( 27.84%) 893933640 ( 37.62%) 587.09
udp 580082 ( 10.61%) 141253754 ( 5.95%) 243.51
dns 352743 ( 6.45%) 88112447 ( 3.71%) 249.79
realaud 15688 ( 0.29%) 6880382 ( 0.29%) 438.58
starcra 1 ( 0.00%) 75 ( 0.00%) 75.00
everque 1 ( 0.00%) 61 ( 0.00%) 61.00
unreal 4 ( 0.00%) 382 ( 0.00%) 95.50
quake 4 ( 0.00%) 301 ( 0.00%) 75.25
other 207989 ( 3.80%) 46135771 ( 1.94%) 221.82
icmp 112613 ( 2.06%) 9350043 ( 0.39%) 83.03
ipsec 186 ( 0.00%) 18092 ( 0.00%) 97.27
ip6 551 ( 0.01%) 83894 ( 0.00%) 152.26
other 258169 ( 4.72%) 47689011 ( 2.01%) 184.72
frag 15 ( 0.00%) 900 ( 0.00%) 60.00
tcpdump file: 200501071115.dump.gz (150.44 MB)