Traffic Trace Info
DumpFile: 200509220045.dump
FileSize: 440.75MB
Id: 200509220045
StartTime: Thu Sep 22 00:45:00 2005
EndTime: Thu Sep 22 01:00:01 2005
TotalTime: 900.48 seconds
TotalCapSize: 342.80MB CapLen: 96 bytes
# of packets: 6419263 (3001.12MB)
AvgRate: 27.96Mbps stddev:1.26M
IP flow (unique src/dst pair) Information
# of flows: 457179 (avg. 14.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.4% 2.9% 2.3% 1.6% 1.4% 1.1% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 308409
Top 10 bandwidth usage (bytes/total in %):
17.3% 14.1% 7.2% 5.4% 5.3% 4.3% 3.4% 2.9% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509220045.pktlen.png)
detailed numbers
[ 16- 31]: 66568
[ 32- 63]: 2250280
[ 64- 127]: 1530392
[ 128- 255]: 304354
[ 256- 511]: 297345
[ 512- 1023]: 251433
[ 1024- 2047]: 1718891
Protocol Breakdown
![[protocol breakdown chart]](200509220045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6419263 (100.00%) 3146900117 (100.00%) 490.23
ip 6276451 ( 97.78%) 3142575233 ( 99.86%) 500.69
tcp 5247384 ( 81.74%) 2875358568 ( 91.37%) 547.96
http(s) 1384649 ( 21.57%) 1454815910 ( 46.23%) 1050.67
http(c) 1027577 ( 16.01%) 93710676 ( 2.98%) 91.20
squid 949 ( 0.01%) 180747 ( 0.01%) 190.46
smtp 207708 ( 3.24%) 56965852 ( 1.81%) 274.26
nntp 134 ( 0.00%) 10781 ( 0.00%) 80.46
ftp 451908 ( 7.04%) 56399813 ( 1.79%) 124.80
pop3 61155 ( 0.95%) 90472830 ( 2.87%) 1479.40
imap 1751 ( 0.03%) 1129487 ( 0.04%) 645.05
telnet 349 ( 0.01%) 36555 ( 0.00%) 104.74
ssh 4863 ( 0.08%) 709754 ( 0.02%) 145.95
dns 970 ( 0.02%) 72485 ( 0.00%) 74.73
bgp 596 ( 0.01%) 425894 ( 0.01%) 714.59
napster 33 ( 0.00%) 2445 ( 0.00%) 74.09
realaud 250 ( 0.00%) 132362 ( 0.00%) 529.45
rtsp 15826 ( 0.25%) 9208786 ( 0.29%) 581.88
icecast 92 ( 0.00%) 6380 ( 0.00%) 69.35
hotline 18 ( 0.00%) 2096 ( 0.00%) 116.44
other 2061282 ( 32.11%) 1110137541 ( 35.28%) 538.57
udp 848630 ( 13.22%) 245038411 ( 7.79%) 288.75
dns 442467 ( 6.89%) 110925139 ( 3.52%) 250.70
realaud 8311 ( 0.13%) 6014527 ( 0.19%) 723.68
halflif 8 ( 0.00%) 995 ( 0.00%) 124.38
starcra 15474 ( 0.24%) 1024263 ( 0.03%) 66.19
everque 9 ( 0.00%) 1192 ( 0.00%) 132.44
quake 10 ( 0.00%) 600 ( 0.00%) 60.00
cuseeme 2 ( 0.00%) 190 ( 0.00%) 95.00
other 376620 ( 5.87%) 126874485 ( 4.03%) 336.88
icmp 159245 ( 2.48%) 12863398 ( 0.41%) 80.78
ip6 184 ( 0.00%) 19080 ( 0.00%) 103.70
other 21008 ( 0.33%) 9295776 ( 0.30%) 442.49
frag 41 ( 0.00%) 13612 ( 0.00%) 332.00
tcpdump file: 200509220045.dump.gz (176.03 MB)