Traffic Trace Info
DumpFile: 200509221115.dump
FileSize: 501.99MB
Id: 200509221115
StartTime: Thu Sep 22 11:15:00 2005
EndTime: Thu Sep 22 11:30:00 2005
TotalTime: 899.43 seconds
TotalCapSize: 392.17MB CapLen: 96 bytes
# of packets: 7197497 (2787.61MB)
AvgRate: 26.00Mbps stddev:1.95M
IP flow (unique src/dst pair) Information
# of flows: 906287 (avg. 7.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.5% 2.4% 2.4% 1.6% 1.6% 1.5% 1.3% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 461717
Top 10 bandwidth usage (bytes/total in %):
18.8% 10.1% 6.9% 6.0% 5.0% 4.5% 3.3% 2.6% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509221115.pktlen.png)
detailed numbers
[ 16- 31]: 73575
[ 32- 63]: 2760575
[ 64- 127]: 1972063
[ 128- 255]: 324184
[ 256- 511]: 323977
[ 512- 1023]: 200280
[ 1024- 2047]: 1542843
Protocol Breakdown
![[protocol breakdown chart]](200509221115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7197497 (100.00%) 2923024382 (100.00%) 406.12
ip 7041196 ( 97.83%) 2918290704 ( 99.84%) 414.46
tcp 5867804 ( 81.53%) 2655297432 ( 90.84%) 452.52
http(s) 1355015 ( 18.83%) 1348514106 ( 46.13%) 995.20
http(c) 1659200 ( 23.05%) 191092377 ( 6.54%) 115.17
squid 23202 ( 0.32%) 17079093 ( 0.58%) 736.10
smtp 184154 ( 2.56%) 41763512 ( 1.43%) 226.79
nntp 64 ( 0.00%) 4495 ( 0.00%) 70.23
ftp 31480 ( 0.44%) 15880075 ( 0.54%) 504.45
pop3 5601 ( 0.08%) 2066444 ( 0.07%) 368.94
imap 3825 ( 0.05%) 1896717 ( 0.06%) 495.87
telnet 1484 ( 0.02%) 134038 ( 0.00%) 90.32
ssh 8093 ( 0.11%) 631148 ( 0.02%) 77.99
dns 933 ( 0.01%) 58208 ( 0.00%) 62.39
bgp 379 ( 0.01%) 242462 ( 0.01%) 639.74
napster 15 ( 0.00%) 1341 ( 0.00%) 89.40
realaud 11 ( 0.00%) 672 ( 0.00%) 61.09
rtsp 32900 ( 0.46%) 24589357 ( 0.84%) 747.40
icecast 5414 ( 0.08%) 357150 ( 0.01%) 65.97
hotline 5 ( 0.00%) 308 ( 0.00%) 61.60
other 2533366 ( 35.20%) 1010206650 ( 34.56%) 398.76
udp 791562 ( 11.00%) 200982760 ( 6.88%) 253.91
dns 449991 ( 6.25%) 108074258 ( 3.70%) 240.17
realaud 897 ( 0.01%) 71598 ( 0.00%) 79.82
halflif 2 ( 0.00%) 155 ( 0.00%) 77.50
starcra 1 ( 0.00%) 249 ( 0.00%) 249.00
everque 45 ( 0.00%) 13817 ( 0.00%) 307.04
quake 3 ( 0.00%) 229 ( 0.00%) 76.33
cuseeme 1 ( 0.00%) 60 ( 0.00%) 60.00
other 336548 ( 4.68%) 92682430 ( 3.17%) 275.39
icmp 287341 ( 3.99%) 23220187 ( 0.79%) 80.81
ip6 236 ( 0.00%) 23408 ( 0.00%) 99.19
other 94253 ( 1.31%) 38766917 ( 1.33%) 411.31
frag 1590 ( 0.02%) 2221752 ( 0.08%) 1397.33
tcpdump file: 200509221115.dump.gz (199.67 MB)