Traffic Trace Info
DumpFile: 200501071200.dump
FileSize: 417.61MB
Id: 200501071200
StartTime: Fri Jan 7 12:00:00 2005
EndTime: Fri Jan 7 12:15:00 2005
TotalTime: 899.31 seconds
TotalCapSize: 325.27MB CapLen: 96 bytes
# of packets: 6051518 (2440.25MB)
AvgRate: 22.76Mbps stddev:2.02M
IP flow (unique src/dst pair) Information
# of flows: 378389 (avg. 15.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.2% 1.2% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 253796
Top 10 bandwidth usage (bytes/total in %):
19.4% 7.0% 4.2% 3.6% 3.1% 2.9% 2.6% 2.1% 2.0% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501071200.pktlen.png)
detailed numbers
[ 16- 31]: 34769
[ 32- 63]: 1933453
[ 64- 127]: 1825308
[ 128- 255]: 357528
[ 256- 511]: 244625
[ 512- 1023]: 365451
[ 1024- 2047]: 1290384
Protocol Breakdown
![[protocol breakdown chart]](200501071200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6051518 (100.00%) 2558784134 (100.00%) 422.83
ip 5967149 ( 98.61%) 2556168434 ( 99.90%) 428.37
tcp 4896862 ( 80.92%) 2301448126 ( 89.94%) 469.98
http(s) 951843 ( 15.73%) 1048590183 ( 40.98%) 1101.64
http(c) 1684649 ( 27.84%) 225458199 ( 8.81%) 133.83
squid 16072 ( 0.27%) 8934549 ( 0.35%) 555.91
smtp 184667 ( 3.05%) 64249418 ( 2.51%) 347.92
nntp 229 ( 0.00%) 19308 ( 0.00%) 84.31
ftp 19176 ( 0.32%) 7807138 ( 0.31%) 407.13
pop3 5119 ( 0.08%) 1076143 ( 0.04%) 210.23
imap 1657 ( 0.03%) 130929 ( 0.01%) 79.02
telnet 2025 ( 0.03%) 237513 ( 0.01%) 117.29
ssh 43982 ( 0.73%) 7327994 ( 0.29%) 166.61
dns 1395 ( 0.02%) 108413 ( 0.00%) 77.72
bgp 231 ( 0.00%) 115069 ( 0.00%) 498.13
napster 328 ( 0.01%) 29056 ( 0.00%) 88.59
rtsp 52008 ( 0.86%) 23404048 ( 0.91%) 450.01
icecast 22792 ( 0.38%) 3596849 ( 0.14%) 157.81
hotline 154 ( 0.00%) 19919 ( 0.00%) 129.34
other 1880084 ( 31.07%) 909305982 ( 35.54%) 483.65
udp 739488 ( 12.22%) 203697210 ( 7.96%) 275.46
dns 376131 ( 6.22%) 101619934 ( 3.97%) 270.17
realaud 35378 ( 0.58%) 20306521 ( 0.79%) 573.99
everque 2 ( 0.00%) 168 ( 0.00%) 84.00
unreal 3 ( 0.00%) 275 ( 0.00%) 91.67
other 323583 ( 5.35%) 81620796 ( 3.19%) 252.24
icmp 105038 ( 1.74%) 8558156 ( 0.33%) 81.48
ipsec 179 ( 0.00%) 17602 ( 0.00%) 98.34
ip6 492 ( 0.01%) 76594 ( 0.00%) 155.68
other 225090 ( 3.72%) 42370746 ( 1.66%) 188.24
frag 18 ( 0.00%) 1080 ( 0.00%) 60.00
tcpdump file: 200501071200.dump.gz (169.20 MB)