Traffic Trace Info
DumpFile: 200509221130.dump
FileSize: 445.97MB
Id: 200509221130
StartTime: Thu Sep 22 11:30:00 2005
EndTime: Thu Sep 22 11:45:00 2005
TotalTime: 900.36 seconds
TotalCapSize: 347.50MB CapLen: 96 bytes
# of packets: 6453267 (2646.76MB)
AvgRate: 24.66Mbps stddev:1.30M
IP flow (unique src/dst pair) Information
# of flows: 579311 (avg. 11.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.6% 3.4% 2.3% 1.7% 1.4% 0.9% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 379066
Top 10 bandwidth usage (bytes/total in %):
20.1% 10.9% 9.0% 7.4% 5.8% 3.7% 3.5% 3.3% 2.9% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509221130.pktlen.png)
detailed numbers
[ 16- 31]: 62475
[ 32- 63]: 2293403
[ 64- 127]: 1791565
[ 128- 255]: 299177
[ 256- 511]: 327831
[ 512- 1023]: 208980
[ 1024- 2047]: 1469836
Protocol Breakdown
![[protocol breakdown chart]](200509221130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6453267 (100.00%) 2775324373 (100.00%) 430.07
ip 6319229 ( 97.92%) 2771260868 ( 99.85%) 438.54
tcp 5186514 ( 80.37%) 2509714745 ( 90.43%) 483.89
http(s) 1244389 ( 19.28%) 1204404214 ( 43.40%) 967.87
http(c) 1577195 ( 24.44%) 185825202 ( 6.70%) 117.82
squid 12459 ( 0.19%) 7412022 ( 0.27%) 594.91
smtp 172929 ( 2.68%) 43614545 ( 1.57%) 252.21
nntp 61 ( 0.00%) 4306 ( 0.00%) 70.59
ftp 20984 ( 0.33%) 8280664 ( 0.30%) 394.62
pop3 5258 ( 0.08%) 1830993 ( 0.07%) 348.23
imap 2117 ( 0.03%) 293069 ( 0.01%) 138.44
telnet 1440 ( 0.02%) 132143 ( 0.00%) 91.77
ssh 3511 ( 0.05%) 247098 ( 0.01%) 70.38
dns 945 ( 0.01%) 58892 ( 0.00%) 62.32
bgp 327 ( 0.01%) 197727 ( 0.01%) 604.67
napster 14 ( 0.00%) 856 ( 0.00%) 61.14
realaud 10 ( 0.00%) 612 ( 0.00%) 61.20
rtsp 34988 ( 0.54%) 17283013 ( 0.62%) 493.97
icecast 5643 ( 0.09%) 372362 ( 0.01%) 65.99
hotline 13 ( 0.00%) 1412 ( 0.00%) 108.62
other 2083362 ( 32.28%) 1039038184 ( 37.44%) 498.73
udp 792681 ( 12.28%) 205557019 ( 7.41%) 259.32
dns 444331 ( 6.89%) 107968589 ( 3.89%) 242.99
realaud 1704 ( 0.03%) 142309 ( 0.01%) 83.51
halflif 3 ( 0.00%) 270 ( 0.00%) 90.00
everque 35 ( 0.00%) 4902 ( 0.00%) 140.06
quake 2 ( 0.00%) 216 ( 0.00%) 108.00
other 342963 ( 5.31%) 97315506 ( 3.51%) 283.75
icmp 232694 ( 3.61%) 19438672 ( 0.70%) 83.54
ip6 204 ( 0.00%) 20240 ( 0.00%) 99.22
other 107136 ( 1.66%) 36530192 ( 1.32%) 340.97
frag 5296 ( 0.08%) 7499765 ( 0.27%) 1416.12
tcpdump file: 200509221130.dump.gz (180.03 MB)