Traffic Trace Info
DumpFile: 200509220030.dump
FileSize: 468.23MB
Id: 200509220030
StartTime: Thu Sep 22 00:30:01 2005
EndTime: Thu Sep 22 00:45:00 2005
TotalTime: 899.49 seconds
TotalCapSize: 364.45MB CapLen: 96 bytes
# of packets: 6801449 (3084.55MB)
AvgRate: 28.77Mbps stddev:1.35M
IP flow (unique src/dst pair) Information
# of flows: 464369 (avg. 14.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.8% 2.7% 1.6% 1.5% 1.4% 1.3% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 313582
Top 10 bandwidth usage (bytes/total in %):
17.9% 13.9% 6.7% 4.9% 4.5% 4.1% 2.8% 2.8% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509220030.pktlen.png)
detailed numbers
[ 16- 31]: 73972
[ 32- 63]: 2359132
[ 64- 127]: 1733383
[ 128- 255]: 297307
[ 256- 511]: 325137
[ 512- 1023]: 257675
[ 1024- 2047]: 1754843
Protocol Breakdown
![[protocol breakdown chart]](200509220030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6801449 (100.00%) 3234381691 (100.00%) 475.54
ip 6644375 ( 97.69%) 3229628509 ( 99.85%) 486.07
tcp 5550494 ( 81.61%) 2925763200 ( 90.46%) 527.12
http(s) 1406295 ( 20.68%) 1449961722 ( 44.83%) 1031.05
http(c) 1093175 ( 16.07%) 98469412 ( 3.04%) 90.08
squid 6486 ( 0.10%) 487321 ( 0.02%) 75.13
smtp 182756 ( 2.69%) 43943244 ( 1.36%) 240.45
nntp 83 ( 0.00%) 5816 ( 0.00%) 70.07
ftp 442801 ( 6.51%) 47413666 ( 1.47%) 107.08
pop3 58772 ( 0.86%) 86761814 ( 2.68%) 1476.24
imap 2296 ( 0.03%) 1789564 ( 0.06%) 779.43
telnet 332 ( 0.00%) 31850 ( 0.00%) 95.93
ssh 4074 ( 0.06%) 461688 ( 0.01%) 113.33
dns 1636 ( 0.02%) 644762 ( 0.02%) 394.11
bgp 324 ( 0.00%) 199117 ( 0.01%) 614.56
napster 8 ( 0.00%) 490 ( 0.00%) 61.25
realaud 1064 ( 0.02%) 692430 ( 0.02%) 650.78
rtsp 9634 ( 0.14%) 5817214 ( 0.18%) 603.82
icecast 119 ( 0.00%) 8596 ( 0.00%) 72.24
hotline 19 ( 0.00%) 1763 ( 0.00%) 92.79
other 2312374 ( 34.00%) 1188101129 ( 36.73%) 513.80
udp 896031 ( 13.17%) 278992317 ( 8.63%) 311.36
dns 456994 ( 6.72%) 113835216 ( 3.52%) 249.10
realaud 65515 ( 0.96%) 42838438 ( 1.32%) 653.87
halflif 5 ( 0.00%) 1101 ( 0.00%) 220.20
starcra 1452 ( 0.02%) 91577 ( 0.00%) 63.07
everque 3 ( 0.00%) 416 ( 0.00%) 138.67
quake 3 ( 0.00%) 187 ( 0.00%) 62.33
cuseeme 1 ( 0.00%) 401 ( 0.00%) 401.00
other 366541 ( 5.39%) 122035255 ( 3.77%) 332.94
icmp 172779 ( 2.54%) 13823730 ( 0.43%) 80.01
ip6 168 ( 0.00%) 17336 ( 0.00%) 103.19
other 24903 ( 0.37%) 11031926 ( 0.34%) 443.00
frag 47 ( 0.00%) 16467 ( 0.00%) 350.36
tcpdump file: 200509220030.dump.gz (185.93 MB)