Traffic Trace Info
DumpFile: 200501072130.dump
FileSize: 802.49MB
Id: 200501072130
StartTime: Fri Jan 7 21:30:00 2005
EndTime: Fri Jan 7 21:45:00 2005
TotalTime: 900.49 seconds
TotalCapSize: 596.11MB CapLen: 96 bytes
# of packets: 13525127 (2431.52MB)
AvgRate: 22.65Mbps stddev:4.07M
IP flow (unique src/dst pair) Information
# of flows: 362523 (avg. 37.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.0% 5.7% 1.5% 1.4% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 262296
Top 10 bandwidth usage (bytes/total in %):
21.0% 20.1% 18.0% 5.8% 5.7% 3.0% 2.8% 2.7% 2.1% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501072130.pktlen.png)
detailed numbers
[ 16- 31]: 55592
[ 32- 63]: 10551618
[ 64- 127]: 1276565
[ 128- 255]: 213140
[ 256- 511]: 152579
[ 512- 1023]: 206151
[ 1024- 2047]: 1069482
Protocol Breakdown
![[protocol breakdown chart]](200501072130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13525127 (100.00%) 2549638642 (100.00%) 188.51
ip 13357874 ( 98.76%) 2544387705 ( 99.79%) 190.48
tcp 3478581 ( 25.72%) 1822220096 ( 71.47%) 523.84
http(s) 612527 ( 4.53%) 692368407 ( 27.16%) 1130.35
http(c) 1113851 ( 8.24%) 116533210 ( 4.57%) 104.62
squid 4743 ( 0.04%) 990868 ( 0.04%) 208.91
smtp 161837 ( 1.20%) 64116688 ( 2.51%) 396.18
nntp 197 ( 0.00%) 17352 ( 0.00%) 88.08
ftp 14804 ( 0.11%) 5453838 ( 0.21%) 368.40
pop3 2136 ( 0.02%) 344297 ( 0.01%) 161.19
imap 691 ( 0.01%) 56521 ( 0.00%) 81.80
telnet 514 ( 0.00%) 53286 ( 0.00%) 103.67
ssh 14380 ( 0.11%) 973684 ( 0.04%) 67.71
dns 545 ( 0.00%) 41904 ( 0.00%) 76.89
bgp 236 ( 0.00%) 125715 ( 0.00%) 532.69
napster 3289 ( 0.02%) 895641 ( 0.04%) 272.31
realaud 5 ( 0.00%) 464 ( 0.00%) 92.80
rtsp 65878 ( 0.49%) 24009586 ( 0.94%) 364.46
icecast 25403 ( 0.19%) 1742955 ( 0.07%) 68.61
other 1443900 ( 10.68%) 914030493 ( 35.85%) 633.03
udp 9656432 ( 71.40%) 687893962 ( 26.98%) 71.24
dns 306593 ( 2.27%) 70105015 ( 2.75%) 228.66
realaud 1715 ( 0.01%) 102900 ( 0.00%) 60.00
halflif 3 ( 0.00%) 273 ( 0.00%) 91.00
starcra 11 ( 0.00%) 700 ( 0.00%) 63.64
everque 70 ( 0.00%) 9248 ( 0.00%) 132.11
quake 11 ( 0.00%) 914 ( 0.00%) 83.09
other 9277871 ( 68.60%) 615284408 ( 24.13%) 66.32
icmp 95226 ( 0.70%) 8162032 ( 0.32%) 85.71
ipsec 177 ( 0.00%) 17598 ( 0.00%) 99.42
ip6 468 ( 0.00%) 75385 ( 0.00%) 161.08
other 126990 ( 0.94%) 26018632 ( 1.02%) 204.89
frag 1548 ( 0.01%) 1669175 ( 0.07%) 1078.28
tcpdump file: 200501072130.dump.gz (200.36 MB)