Traffic Trace Info
DumpFile: 200501072145.dump
FileSize: 1511.90MB
Id: 200501072145
StartTime: Fri Jan 7 21:45:00 2005
EndTime: Fri Jan 7 22:00:01 2005
TotalTime: 900.65 seconds
TotalCapSize: 1106.02MB CapLen: 96 bytes
# of packets: 26599620 (2734.83MB)
AvgRate: 25.47Mbps stddev:2.45M
IP flow (unique src/dst pair) Information
# of flows: 363180 (avg. 73.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
47.1% 5.6% 1.2% 1.0% 0.9% 0.5% 0.5% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 259995
Top 10 bandwidth usage (bytes/total in %):
47.3% 47.3% 5.6% 5.6% 4.8% 2.9% 2.6% 2.2% 2.0% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501072145.pktlen.png)
detailed numbers
[ 16- 31]: 93880
[ 32- 63]: 24181108
[ 64- 127]: 1034994
[ 128- 255]: 151746
[ 256- 511]: 134772
[ 512- 1023]: 257949
[ 1024- 2047]: 745171
Protocol Breakdown
![[protocol breakdown chart]](200501072145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26599620 (100.00%) 2867680971 (100.00%) 107.81
ip 26296244 ( 98.86%) 2858121695 ( 99.67%) 108.69
tcp 2757789 ( 10.37%) 1295522951 ( 45.18%) 469.77
http(s) 532024 ( 2.00%) 581466503 ( 20.28%) 1092.93
http(c) 896801 ( 3.37%) 98547572 ( 3.44%) 109.89
squid 4781 ( 0.02%) 744533 ( 0.03%) 155.73
smtp 138123 ( 0.52%) 40949416 ( 1.43%) 296.47
nntp 200 ( 0.00%) 18092 ( 0.00%) 90.46
ftp 12744 ( 0.05%) 2907486 ( 0.10%) 228.15
pop3 1994 ( 0.01%) 246723 ( 0.01%) 123.73
imap 776 ( 0.00%) 88785 ( 0.00%) 114.41
telnet 385 ( 0.00%) 39743 ( 0.00%) 103.23
ssh 17451 ( 0.07%) 1101494 ( 0.04%) 63.12
dns 910 ( 0.00%) 73696 ( 0.00%) 80.98
bgp 482 ( 0.00%) 300942 ( 0.01%) 624.36
napster 2485 ( 0.01%) 724211 ( 0.03%) 291.43
rtsp 56942 ( 0.21%) 20539024 ( 0.72%) 360.70
icecast 22762 ( 0.09%) 1605434 ( 0.06%) 70.53
other 1061823 ( 3.99%) 545926736 ( 19.04%) 514.14
udp 23338068 ( 87.74%) 1530814515 ( 53.38%) 65.59
dns 347310 ( 1.31%) 103081484 ( 3.59%) 296.80
realaud 1607 ( 0.01%) 96420 ( 0.00%) 60.00
everque 193 ( 0.00%) 49450 ( 0.00%) 256.22
quake 2 ( 0.00%) 160 ( 0.00%) 80.00
other 22834454 ( 85.85%) 1419941488 ( 49.52%) 62.18
icmp 94519 ( 0.36%) 8002450 ( 0.28%) 84.66
ipsec 157 ( 0.00%) 15598 ( 0.00%) 99.35
ip6 458 ( 0.00%) 73674 ( 0.00%) 160.86
other 105253 ( 0.40%) 23692507 ( 0.83%) 225.10
frag 8168 ( 0.03%) 11968537 ( 0.42%) 1465.30
tcpdump file: 200501072145.dump.gz (302.10 MB)