Traffic Trace Info
DumpFile: 200501071900.dump
FileSize: 586.64MB
Id: 200501071900
StartTime: Fri Jan 7 19:00:00 2005
EndTime: Fri Jan 7 19:15:00 2005
TotalTime: 900.27 seconds
TotalCapSize: 447.14MB CapLen: 96 bytes
# of packets: 9142742 (2570.86MB)
AvgRate: 23.95Mbps stddev:3.05M
IP flow (unique src/dst pair) Information
# of flows: 530966 (avg. 17.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 5.2% 3.8% 2.2% 1.8% 1.4% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 374657
Top 10 bandwidth usage (bytes/total in %):
18.2% 6.7% 6.7% 5.2% 5.2% 3.9% 3.9% 3.3% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501071900.pktlen.png)
detailed numbers
[ 16- 31]: 50041
[ 32- 63]: 5304023
[ 64- 127]: 1671310
[ 128- 255]: 307192
[ 256- 511]: 225763
[ 512- 1023]: 283116
[ 1024- 2047]: 1301297
Protocol Breakdown
![[protocol breakdown chart]](200501071900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9142742 (100.00%) 2695737967 (100.00%) 294.85
ip 9011604 ( 98.57%) 2691653117 ( 99.85%) 298.69
tcp 4962253 ( 54.28%) 2281770493 ( 84.64%) 459.83
http(s) 903080 ( 9.88%) 1020288781 ( 37.85%) 1129.79
http(c) 1683486 ( 18.41%) 222880614 ( 8.27%) 132.39
squid 6097 ( 0.07%) 555515 ( 0.02%) 91.11
smtp 246755 ( 2.70%) 93581755 ( 3.47%) 379.25
nntp 248 ( 0.00%) 22300 ( 0.00%) 89.92
ftp 72157 ( 0.79%) 9494538 ( 0.35%) 131.58
pop3 6610 ( 0.07%) 834228 ( 0.03%) 126.21
imap 1628 ( 0.02%) 131777 ( 0.00%) 80.94
telnet 2048 ( 0.02%) 217414 ( 0.01%) 106.16
ssh 2481 ( 0.03%) 332508 ( 0.01%) 134.02
dns 1046 ( 0.01%) 77841 ( 0.00%) 74.42
bgp 255 ( 0.00%) 136720 ( 0.01%) 536.16
napster 993 ( 0.01%) 100795 ( 0.00%) 101.51
realaud 2564 ( 0.03%) 1098553 ( 0.04%) 428.45
rtsp 35817 ( 0.39%) 25944242 ( 0.96%) 724.36
icecast 15443 ( 0.17%) 5996997 ( 0.22%) 388.33
other 1951723 ( 21.35%) 899060023 ( 33.35%) 460.65
udp 3809452 ( 41.67%) 372852013 ( 13.83%) 97.88
dns 369458 ( 4.04%) 100754404 ( 3.74%) 272.71
realaud 17175 ( 0.19%) 7982685 ( 0.30%) 464.79
everque 61 ( 0.00%) 8645 ( 0.00%) 141.72
unreal 3 ( 0.00%) 459 ( 0.00%) 153.00
quake 4 ( 0.00%) 265 ( 0.00%) 66.25
other 3393072 ( 37.11%) 263093512 ( 9.76%) 77.54
icmp 86907 ( 0.95%) 11045407 ( 0.41%) 127.09
ipsec 179 ( 0.00%) 17482 ( 0.00%) 97.66
ip6 494 ( 0.01%) 77781 ( 0.00%) 157.45
other 152319 ( 1.67%) 25889941 ( 0.96%) 169.97
frag 3325 ( 0.04%) 3333973 ( 0.12%) 1002.70
tcpdump file: 200501071900.dump.gz (195.00 MB)