Traffic Trace Info
DumpFile: 200501071600.dump
FileSize: 510.74MB
Id: 200501071600
StartTime: Fri Jan 7 16:00:00 2005
EndTime: Fri Jan 7 16:15:01 2005
TotalTime: 900.45 seconds
TotalCapSize: 398.62MB CapLen: 96 bytes
# of packets: 7347675 (2856.80MB)
AvgRate: 26.62Mbps stddev:1.74M
IP flow (unique src/dst pair) Information
# of flows: 376986 (avg. 19.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.0% 1.6% 1.4% 1.4% 1.0% 0.9% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 260052
Top 10 bandwidth usage (bytes/total in %):
16.8% 5.8% 5.7% 5.2% 4.1% 4.1% 3.7% 2.6% 2.5% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501071600.pktlen.png)
detailed numbers
[ 16- 31]: 51603
[ 32- 63]: 2445596
[ 64- 127]: 2392609
[ 128- 255]: 306615
[ 256- 511]: 272384
[ 512- 1023]: 319590
[ 1024- 2047]: 1559278
Protocol Breakdown
![[protocol breakdown chart]](200501071600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7347675 (100.00%) 2995573763 (100.00%) 407.69
ip 7222464 ( 98.30%) 2991692220 ( 99.87%) 414.22
tcp 6269612 ( 85.33%) 2783529848 ( 92.92%) 443.97
http(s) 930522 ( 12.66%) 1007052076 ( 33.62%) 1082.24
http(c) 2484883 ( 33.82%) 303980070 ( 10.15%) 122.33
squid 11197 ( 0.15%) 1109878 ( 0.04%) 99.12
smtp 233992 ( 3.18%) 91135910 ( 3.04%) 389.48
nntp 270 ( 0.00%) 21808 ( 0.00%) 80.77
ftp 15142 ( 0.21%) 1331561 ( 0.04%) 87.94
pop3 7120 ( 0.10%) 2479816 ( 0.08%) 348.29
imap 1929 ( 0.03%) 143528 ( 0.00%) 74.41
telnet 2658 ( 0.04%) 262969 ( 0.01%) 98.93
ssh 11834 ( 0.16%) 8242441 ( 0.28%) 696.51
dns 536 ( 0.01%) 39384 ( 0.00%) 73.48
bgp 236 ( 0.00%) 121557 ( 0.00%) 515.07
napster 8100 ( 0.11%) 4247366 ( 0.14%) 524.37
realaud 81 ( 0.00%) 11420 ( 0.00%) 140.99
rtsp 252224 ( 3.43%) 211849811 ( 7.07%) 839.93
icecast 62463 ( 0.85%) 16397102 ( 0.55%) 262.51
hotline 8 ( 0.00%) 913 ( 0.00%) 114.12
other 2199296 ( 29.93%) 1133497105 ( 37.84%) 515.39
udp 671215 ( 9.14%) 169099083 ( 5.64%) 251.93
dns 381890 ( 5.20%) 101247773 ( 3.38%) 265.12
realaud 12535 ( 0.17%) 4887530 ( 0.16%) 389.91
halflif 1 ( 0.00%) 96 ( 0.00%) 96.00
starcra 2 ( 0.00%) 168 ( 0.00%) 84.00
everque 60 ( 0.00%) 8563 ( 0.00%) 142.72
unreal 5 ( 0.00%) 351 ( 0.00%) 70.20
quake 1 ( 0.00%) 92 ( 0.00%) 92.00
other 271812 ( 3.70%) 62787348 ( 2.10%) 231.00
icmp 100198 ( 1.36%) 8168274 ( 0.27%) 81.52
ipsec 181 ( 0.00%) 17778 ( 0.00%) 98.22
ip6 514 ( 0.01%) 79180 ( 0.00%) 154.05
other 180744 ( 2.46%) 30798057 ( 1.03%) 170.40
frag 20 ( 0.00%) 1174 ( 0.00%) 58.70
tcpdump file: 200501071600.dump.gz (202.42 MB)