Traffic Trace Info
DumpFile: 200509220415.dump
FileSize: 357.77MB
Id: 200509220415
StartTime: Thu Sep 22 04:15:00 2005
EndTime: Thu Sep 22 04:30:00 2005
TotalTime: 900.09 seconds
TotalCapSize: 279.10MB CapLen: 96 bytes
# of packets: 5155496 (2589.08MB)
AvgRate: 24.13Mbps stddev:1.23M
IP flow (unique src/dst pair) Information
# of flows: 487523 (avg. 10.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 6.4% 2.5% 1.8% 1.5% 1.2% 0.9% 0.9% 0.9% 0.5%
IP address Information
# of IPv4 addresses: 319191
Top 10 bandwidth usage (bytes/total in %):
19.5% 15.0% 14.5% 8.8% 7.5% 6.4% 3.9% 2.9% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509220415.pktlen.png)
detailed numbers
[ 16- 31]: 44510
[ 32- 63]: 1577235
[ 64- 127]: 1358789
[ 128- 255]: 229455
[ 256- 511]: 262655
[ 512- 1023]: 155721
[ 1024- 2047]: 1527131
Protocol Breakdown
![[protocol breakdown chart]](200509220415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5155496 (100.00%) 2714851978 (100.00%) 526.59
ip 5058756 ( 98.12%) 2711919867 ( 99.89%) 536.08
tcp 4180868 ( 81.10%) 2476155825 ( 91.21%) 592.26
http(s) 1159604 ( 22.49%) 1101391127 ( 40.57%) 949.80
http(c) 704562 ( 13.67%) 65012874 ( 2.39%) 92.27
squid 965 ( 0.02%) 522690 ( 0.02%) 541.65
smtp 194689 ( 3.78%) 37284682 ( 1.37%) 191.51
nntp 46 ( 0.00%) 2760 ( 0.00%) 60.00
ftp 27901 ( 0.54%) 27238963 ( 1.00%) 976.27
pop3 642 ( 0.01%) 80748 ( 0.00%) 125.78
imap 990 ( 0.02%) 484496 ( 0.02%) 489.39
telnet 121 ( 0.00%) 9182 ( 0.00%) 75.88
ssh 56742 ( 1.10%) 7316912 ( 0.27%) 128.95
dns 443 ( 0.01%) 30505 ( 0.00%) 68.86
bgp 199 ( 0.00%) 101433 ( 0.00%) 509.71
napster 23 ( 0.00%) 2165 ( 0.00%) 94.13
realaud 5 ( 0.00%) 308 ( 0.00%) 61.60
rtsp 6 ( 0.00%) 364 ( 0.00%) 60.67
icecast 77 ( 0.00%) 4756 ( 0.00%) 61.77
hotline 14 ( 0.00%) 1283 ( 0.00%) 91.64
other 2014963 ( 39.08%) 1236021096 ( 45.53%) 613.42
udp 670404 ( 13.00%) 179193010 ( 6.60%) 267.29
dns 460842 ( 8.94%) 112607706 ( 4.15%) 244.35
realaud 3 ( 0.00%) 391 ( 0.00%) 130.33
halflif 6 ( 0.00%) 517 ( 0.00%) 86.17
starcra 1 ( 0.00%) 100 ( 0.00%) 100.00
everque 7 ( 0.00%) 783 ( 0.00%) 111.86
unreal 1 ( 0.00%) 100 ( 0.00%) 100.00
quake 1 ( 0.00%) 71 ( 0.00%) 71.00
other 205808 ( 3.99%) 66454955 ( 2.45%) 322.90
icmp 165456 ( 3.21%) 13205557 ( 0.49%) 79.81
ip6 176 ( 0.00%) 18168 ( 0.00%) 103.23
other 41852 ( 0.81%) 43347307 ( 1.60%) 1035.73
frag 5306 ( 0.10%) 7498911 ( 0.28%) 1413.29
tcpdump file: 200509220415.dump.gz (145.06 MB)