Traffic Trace Info
DumpFile: 200509220400.dump
FileSize: 353.30MB
Id: 200509220400
StartTime: Thu Sep 22 04:00:01 2005
EndTime: Thu Sep 22 04:15:00 2005
TotalTime: 899.21 seconds
TotalCapSize: 275.70MB CapLen: 96 bytes
# of packets: 5085855 (2515.23MB)
AvgRate: 23.47Mbps stddev:1.41M
IP flow (unique src/dst pair) Information
# of flows: 546671 (avg. 9.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 6.4% 2.3% 1.8% 1.5% 1.3% 1.2% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 363625
Top 10 bandwidth usage (bytes/total in %):
17.7% 14.0% 12.8% 7.5% 7.0% 6.4% 3.6% 2.8% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509220400.pktlen.png)
detailed numbers
[ 16- 31]: 41652
[ 32- 63]: 1540965
[ 64- 127]: 1375806
[ 128- 255]: 239028
[ 256- 511]: 265580
[ 512- 1023]: 144218
[ 1024- 2047]: 1478606
Protocol Breakdown
![[protocol breakdown chart]](200509220400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5085855 (100.00%) 2637408544 (100.00%) 518.58
ip 4996455 ( 98.24%) 2634701817 ( 99.90%) 527.31
tcp 4080778 ( 80.24%) 2388377132 ( 90.56%) 585.27
http(s) 1030164 ( 20.26%) 994622386 ( 37.71%) 965.50
http(c) 687158 ( 13.51%) 65558867 ( 2.49%) 95.41
squid 585 ( 0.01%) 60645 ( 0.00%) 103.67
smtp 249466 ( 4.91%) 43381279 ( 1.64%) 173.90
nntp 49 ( 0.00%) 3005 ( 0.00%) 61.33
ftp 28640 ( 0.56%) 28401081 ( 1.08%) 991.66
pop3 1196 ( 0.02%) 328315 ( 0.01%) 274.51
imap 1064 ( 0.02%) 493357 ( 0.02%) 463.68
telnet 101 ( 0.00%) 8096 ( 0.00%) 80.16
ssh 5810 ( 0.11%) 575164 ( 0.02%) 99.00
dns 422 ( 0.01%) 29297 ( 0.00%) 69.42
bgp 291 ( 0.01%) 168288 ( 0.01%) 578.31
napster 8 ( 0.00%) 490 ( 0.00%) 61.25
realaud 7 ( 0.00%) 430 ( 0.00%) 61.43
rtsp 1 ( 0.00%) 62 ( 0.00%) 62.00
icecast 196 ( 0.00%) 136180 ( 0.01%) 694.80
hotline 9 ( 0.00%) 975 ( 0.00%) 108.33
other 2057969 ( 40.46%) 1254002330 ( 47.55%) 609.34
udp 709245 ( 13.95%) 187798215 ( 7.12%) 264.79
dns 504131 ( 9.91%) 119745218 ( 4.54%) 237.53
realaud 2 ( 0.00%) 165 ( 0.00%) 82.50
halflif 8 ( 0.00%) 625 ( 0.00%) 78.12
everque 6 ( 0.00%) 796 ( 0.00%) 132.67
other 200954 ( 3.95%) 67908941 ( 2.57%) 337.93
icmp 163569 ( 3.22%) 13120576 ( 0.50%) 80.21
ip6 185 ( 0.00%) 19114 ( 0.00%) 103.32
other 42678 ( 0.84%) 45386780 ( 1.72%) 1063.47
frag 5289 ( 0.10%) 7491176 ( 0.28%) 1416.37
tcpdump file: 200509220400.dump.gz (142.14 MB)