Traffic Trace Info
DumpFile: 200501071830.dump
FileSize: 440.69MB
Id: 200501071830
StartTime: Fri Jan 7 18:30:00 2005
EndTime: Fri Jan 7 18:45:01 2005
TotalTime: 900.41 seconds
TotalCapSize: 343.75MB CapLen: 96 bytes
# of packets: 6353146 (2739.02MB)
AvgRate: 25.52Mbps stddev:1.32M
IP flow (unique src/dst pair) Information
# of flows: 399555 (avg. 15.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.3% 3.2% 1.9% 1.7% 1.1% 0.9% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 259672
Top 10 bandwidth usage (bytes/total in %):
19.1% 13.3% 13.3% 3.7% 3.3% 3.3% 3.1% 2.9% 2.8% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501071830.pktlen.png)
detailed numbers
[ 16- 31]: 40380
[ 32- 63]: 2149020
[ 64- 127]: 1851291
[ 128- 255]: 240458
[ 256- 511]: 214997
[ 512- 1023]: 331179
[ 1024- 2047]: 1525821
Protocol Breakdown
![[protocol breakdown chart]](200501071830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6353146 (100.00%) 2872074570 (100.00%) 452.07
ip 6257676 ( 98.50%) 2869120371 ( 99.90%) 458.50
tcp 5343042 ( 84.10%) 2646910238 ( 92.16%) 495.39
http(s) 1154068 ( 18.17%) 1358944566 ( 47.32%) 1177.53
http(c) 1957692 ( 30.81%) 242996235 ( 8.46%) 124.12
squid 9023 ( 0.14%) 1099603 ( 0.04%) 121.87
smtp 232575 ( 3.66%) 103025708 ( 3.59%) 442.98
nntp 206 ( 0.00%) 17079 ( 0.00%) 82.91
ftp 54763 ( 0.86%) 5253608 ( 0.18%) 95.93
pop3 6684 ( 0.11%) 1746172 ( 0.06%) 261.25
imap 1590 ( 0.03%) 122082 ( 0.00%) 76.78
telnet 2720 ( 0.04%) 480759 ( 0.02%) 176.75
ssh 8553 ( 0.13%) 10194417 ( 0.35%) 1191.91
dns 842 ( 0.01%) 56045 ( 0.00%) 66.56
bgp 260 ( 0.00%) 144457 ( 0.01%) 555.60
napster 2784 ( 0.04%) 1136512 ( 0.04%) 408.23
realaud 32 ( 0.00%) 2138 ( 0.00%) 66.81
rtsp 33665 ( 0.53%) 17724459 ( 0.62%) 526.50
icecast 12879 ( 0.20%) 941596 ( 0.03%) 73.11
other 1830966 ( 28.82%) 901875522 ( 31.40%) 492.57
udp 650380 ( 10.24%) 183355000 ( 6.38%) 281.92
dns 443982 ( 6.99%) 133021514 ( 4.63%) 299.61
realaud 12273 ( 0.19%) 4800799 ( 0.17%) 391.17
everque 83 ( 0.00%) 19159 ( 0.00%) 230.83
unreal 9 ( 0.00%) 740 ( 0.00%) 82.22
quake 1 ( 0.00%) 63 ( 0.00%) 63.00
cuseeme 2 ( 0.00%) 184 ( 0.00%) 92.00
other 189122 ( 2.98%) 45342851 ( 1.58%) 239.75
icmp 89748 ( 1.41%) 7710888 ( 0.27%) 85.92
ipsec 179 ( 0.00%) 17786 ( 0.00%) 99.36
ip6 470 ( 0.01%) 78265 ( 0.00%) 166.52
other 173857 ( 2.74%) 31048194 ( 1.08%) 178.58
frag 5605 ( 0.09%) 7024411 ( 0.24%) 1253.24
tcpdump file: 200501071830.dump.gz (173.88 MB)