Traffic Trace Info
DumpFile: 200509220700.dump
FileSize: 338.41MB
Id: 200509220700
StartTime: Thu Sep 22 07:00:00 2005
EndTime: Thu Sep 22 07:15:01 2005
TotalTime: 900.64 seconds
TotalCapSize: 263.64MB CapLen: 96 bytes
# of packets: 4899981 (2521.73MB)
AvgRate: 23.49Mbps stddev:1.35M
IP flow (unique src/dst pair) Information
# of flows: 493676 (avg. 9.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 6.4% 2.1% 2.0% 1.8% 1.8% 1.4% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 331802
Top 10 bandwidth usage (bytes/total in %):
16.5% 14.7% 11.1% 7.4% 6.6% 6.4% 5.6% 5.1% 3.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509220700.pktlen.png)
detailed numbers
[ 16- 31]: 39966
[ 32- 63]: 1550387
[ 64- 127]: 1142829
[ 128- 255]: 254369
[ 256- 511]: 283983
[ 512- 1023]: 135718
[ 1024- 2047]: 1492729
Protocol Breakdown
![[protocol breakdown chart]](200509220700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4899981 (100.00%) 2644220999 (100.00%) 539.64
ip 4812972 ( 98.22%) 2641583357 ( 99.90%) 548.85
tcp 3884528 ( 79.28%) 2387882053 ( 90.31%) 614.72
http(s) 1159740 ( 23.67%) 1194796130 ( 45.19%) 1030.23
http(c) 749433 ( 15.29%) 62684078 ( 2.37%) 83.64
squid 1221 ( 0.02%) 850843 ( 0.03%) 696.84
smtp 153115 ( 3.12%) 38255699 ( 1.45%) 249.85
nntp 49 ( 0.00%) 3005 ( 0.00%) 61.33
ftp 17150 ( 0.35%) 6572079 ( 0.25%) 383.21
pop3 1430 ( 0.03%) 466604 ( 0.02%) 326.30
imap 1171 ( 0.02%) 505093 ( 0.02%) 431.33
telnet 121 ( 0.00%) 9144 ( 0.00%) 75.57
ssh 12250 ( 0.25%) 1956047 ( 0.07%) 159.68
dns 361 ( 0.01%) 24649 ( 0.00%) 68.28
bgp 661 ( 0.01%) 472631 ( 0.02%) 715.02
napster 436 ( 0.01%) 242209 ( 0.01%) 555.53
realaud 5 ( 0.00%) 310 ( 0.00%) 62.00
rtsp 2191 ( 0.04%) 152393 ( 0.01%) 69.55
icecast 152 ( 0.00%) 11748 ( 0.00%) 77.29
hotline 9 ( 0.00%) 971 ( 0.00%) 107.89
other 1767603 ( 36.07%) 1080279263 ( 40.85%) 611.15
udp 712848 ( 14.55%) 185940584 ( 7.03%) 260.84
dns 425197 ( 8.68%) 104065719 ( 3.94%) 244.75
halflif 3 ( 0.00%) 624 ( 0.00%) 208.00
everque 15 ( 0.00%) 1989 ( 0.00%) 132.60
unreal 15 ( 0.00%) 1582 ( 0.00%) 105.47
quake 1 ( 0.00%) 60 ( 0.00%) 60.00
other 283882 ( 5.79%) 81742274 ( 3.09%) 287.94
icmp 167341 ( 3.42%) 13265042 ( 0.50%) 79.27
ip6 167 ( 0.00%) 17062 ( 0.00%) 102.17
other 48088 ( 0.98%) 54478616 ( 2.06%) 1132.89
frag 16 ( 0.00%) 960 ( 0.00%) 60.00
tcpdump file: 200509220700.dump.gz (134.17 MB)