Traffic Trace Info
DumpFile: 200501072215.dump
FileSize: 1527.10MB
Id: 200501072215
StartTime: Fri Jan 7 22:15:00 2005
EndTime: Fri Jan 7 22:30:01 2005
TotalTime: 900.67 seconds
TotalCapSize: 1118.12MB CapLen: 96 bytes
# of packets: 26802736 (2850.12MB)
AvgRate: 26.54Mbps stddev:2.46M
IP flow (unique src/dst pair) Information
# of flows: 390795 (avg. 68.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
44.8% 6.6% 4.9% 1.2% 1.1% 0.9% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 249118
Top 10 bandwidth usage (bytes/total in %):
45.0% 45.0% 6.6% 6.6% 5.1% 5.0% 4.6% 2.9% 2.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200501072215.pktlen.png)
detailed numbers
[ 16- 31]: 103485
[ 32- 63]: 24018133
[ 64- 127]: 1307497
[ 128- 255]: 174787
[ 256- 511]: 128208
[ 512- 1023]: 253438
[ 1024- 2047]: 817188
Protocol Breakdown
![[protocol breakdown chart]](200501072215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26802736 (100.00%) 2988565131 (100.00%) 111.50
ip 26468735 ( 98.75%) 2978042972 ( 99.65%) 112.51
tcp 3049561 ( 11.38%) 1414450979 ( 47.33%) 463.82
http(s) 709175 ( 2.65%) 848271646 ( 28.38%) 1196.14
http(c) 1086404 ( 4.05%) 106792439 ( 3.57%) 98.30
squid 3639 ( 0.01%) 341992 ( 0.01%) 93.98
smtp 156806 ( 0.59%) 49135364 ( 1.64%) 313.35
nntp 270 ( 0.00%) 28218 ( 0.00%) 104.51
ftp 33262 ( 0.12%) 4425644 ( 0.15%) 133.05
pop3 2645 ( 0.01%) 841941 ( 0.03%) 318.31
imap 743 ( 0.00%) 62968 ( 0.00%) 84.75
telnet 185 ( 0.00%) 15111 ( 0.00%) 81.68
ssh 1755 ( 0.01%) 159860 ( 0.01%) 91.09
dns 508 ( 0.00%) 38388 ( 0.00%) 75.57
bgp 239 ( 0.00%) 122645 ( 0.00%) 513.16
napster 3329 ( 0.01%) 878653 ( 0.03%) 263.94
realaud 4 ( 0.00%) 296 ( 0.00%) 74.00
rtsp 40084 ( 0.15%) 25764577 ( 0.86%) 642.76
icecast 23337 ( 0.09%) 1779481 ( 0.06%) 76.25
other 978082 ( 3.65%) 375481402 ( 12.56%) 383.90
udp 23174313 ( 86.46%) 1525414285 ( 51.04%) 65.82
dns 341437 ( 1.27%) 106356857 ( 3.56%) 311.50
realaud 2114 ( 0.01%) 753609 ( 0.03%) 356.48
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
starcra 1 ( 0.00%) 61 ( 0.00%) 61.00
everque 141 ( 0.00%) 22018 ( 0.00%) 156.16
other 22661694 ( 84.55%) 1409925892 ( 47.18%) 62.22
icmp 95754 ( 0.36%) 10031034 ( 0.34%) 104.76
ipsec 485 ( 0.00%) 290994 ( 0.01%) 599.99
ip6 462 ( 0.00%) 71436 ( 0.00%) 154.62
other 148160 ( 0.55%) 27784244 ( 0.93%) 187.53
frag 8205 ( 0.03%) 11952751 ( 0.40%) 1456.76
tcpdump file: 200501072215.dump.gz (308.98 MB)