Traffic Trace Info
DumpFile: 200509220145.dump
FileSize: 393.82MB
Id: 200509220145
StartTime: Thu Sep 22 01:45:00 2005
EndTime: Thu Sep 22 02:00:01 2005
TotalTime: 900.26 seconds
TotalCapSize: 305.91MB CapLen: 96 bytes
# of packets: 5761204 (2910.25MB)
AvgRate: 27.12Mbps stddev:2.14M
IP flow (unique src/dst pair) Information
# of flows: 468827 (avg. 12.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.8% 3.6% 2.2% 1.8% 1.2% 1.1% 1.0% 1.0% 0.7%
IP address Information
# of IPv4 addresses: 306181
Top 10 bandwidth usage (bytes/total in %):
16.6% 13.4% 8.1% 6.1% 5.5% 5.1% 4.6% 3.9% 3.6% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509220145.pktlen.png)
detailed numbers
[ 16- 31]: 57660
[ 32- 63]: 1685016
[ 64- 127]: 1471311
[ 128- 255]: 322187
[ 256- 511]: 270541
[ 512- 1023]: 210795
[ 1024- 2047]: 1743694
Protocol Breakdown
![[protocol breakdown chart]](200509220145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5761204 (100.00%) 3051623302 (100.00%) 529.68
ip 5634380 ( 97.80%) 3047776145 ( 99.87%) 540.92
tcp 4302473 ( 74.68%) 2607044776 ( 85.43%) 605.94
http(s) 1350208 ( 23.44%) 1367260068 ( 44.80%) 1012.63
http(c) 745968 ( 12.95%) 70720386 ( 2.32%) 94.80
squid 937 ( 0.02%) 103597 ( 0.00%) 110.56
smtp 182405 ( 3.17%) 37909202 ( 1.24%) 207.83
nntp 96 ( 0.00%) 7219 ( 0.00%) 75.20
ftp 19233 ( 0.33%) 22692355 ( 0.74%) 1179.87
pop3 722 ( 0.01%) 120380 ( 0.00%) 166.73
imap 4098 ( 0.07%) 3042824 ( 0.10%) 742.51
telnet 185 ( 0.00%) 14008 ( 0.00%) 75.72
ssh 56293 ( 0.98%) 9358449 ( 0.31%) 166.25
dns 10347 ( 0.18%) 691437 ( 0.02%) 66.82
bgp 462 ( 0.01%) 310435 ( 0.01%) 671.94
napster 13 ( 0.00%) 802 ( 0.00%) 61.69
realaud 6 ( 0.00%) 372 ( 0.00%) 62.00
rtsp 494 ( 0.01%) 53816 ( 0.00%) 108.94
icecast 152 ( 0.00%) 51393 ( 0.00%) 338.11
hotline 11 ( 0.00%) 1097 ( 0.00%) 99.73
other 1905671 ( 33.08%) 1093841424 ( 35.84%) 573.99
udp 1064100 ( 18.47%) 406615273 ( 13.32%) 382.12
dns 506767 ( 8.80%) 122340199 ( 4.01%) 241.41
rip 165 ( 0.00%) 175890 ( 0.01%) 1066.00
realaud 1 ( 0.00%) 100 ( 0.00%) 100.00
halflif 4 ( 0.00%) 246 ( 0.00%) 61.50
starcra 23561 ( 0.41%) 1627679 ( 0.05%) 69.08
everque 6 ( 0.00%) 844 ( 0.00%) 140.67
cuseeme 1 ( 0.00%) 96 ( 0.00%) 96.00
other 527466 ( 9.16%) 282257080 ( 9.25%) 535.12
icmp 225842 ( 3.92%) 17533778 ( 0.57%) 77.64
ip6 169 ( 0.00%) 17354 ( 0.00%) 102.69
other 41796 ( 0.73%) 16564964 ( 0.54%) 396.33
frag 5340 ( 0.09%) 7542634 ( 0.25%) 1412.48
tcpdump file: 200509220145.dump.gz (159.84 MB)