Traffic Trace Info
DumpFile: 200509221800.dump
FileSize: 482.99MB
Id: 200509221800
StartTime: Thu Sep 22 18:00:01 2005
EndTime: Thu Sep 22 18:15:01 2005
TotalTime: 900.04 seconds
TotalCapSize: 377.42MB CapLen: 96 bytes
# of packets: 6918262 (2771.46MB)
AvgRate: 25.83Mbps stddev:1.52M
IP flow (unique src/dst pair) Information
# of flows: 661235 (avg. 10.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.2% 1.9% 1.7% 0.9% 0.9% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 434252
Top 10 bandwidth usage (bytes/total in %):
16.3% 11.4% 6.8% 4.9% 3.0% 2.9% 2.9% 2.6% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200509221800.pktlen.png)
detailed numbers
[ 16- 31]: 70303
[ 32- 63]: 2456496
[ 64- 127]: 1997206
[ 128- 255]: 294197
[ 256- 511]: 349519
[ 512- 1023]: 221463
[ 1024- 2047]: 1529078
Protocol Breakdown
![[protocol breakdown chart]](200509221800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6918262 (100.00%) 2906081263 (100.00%) 420.06
ip 6770905 ( 97.87%) 2901624247 ( 99.85%) 428.54
tcp 5550830 ( 80.23%) 2618958442 ( 90.12%) 471.81
http(s) 1334307 ( 19.29%) 1303934702 ( 44.87%) 977.24
http(c) 1567442 ( 22.66%) 172094325 ( 5.92%) 109.79
squid 10614 ( 0.15%) 3581476 ( 0.12%) 337.43
smtp 414450 ( 5.99%) 124443464 ( 4.28%) 300.26
nntp 18 ( 0.00%) 1086 ( 0.00%) 60.33
ftp 45983 ( 0.66%) 29209433 ( 1.01%) 635.22
pop3 47707 ( 0.69%) 65211310 ( 2.24%) 1366.91
imap 1837 ( 0.03%) 394060 ( 0.01%) 214.51
telnet 7047 ( 0.10%) 1225179 ( 0.04%) 173.86
ssh 2678 ( 0.04%) 496930 ( 0.02%) 185.56
dns 987 ( 0.01%) 65589 ( 0.00%) 66.45
bgp 351 ( 0.01%) 219126 ( 0.01%) 624.29
napster 17 ( 0.00%) 1046 ( 0.00%) 61.53
realaud 17 ( 0.00%) 1052 ( 0.00%) 61.88
rtsp 41669 ( 0.60%) 34701882 ( 1.19%) 832.80
icecast 12344 ( 0.18%) 748623 ( 0.03%) 60.65
hotline 7 ( 0.00%) 434 ( 0.00%) 62.00
other 2041189 ( 29.50%) 881865733 ( 30.35%) 432.04
udp 865608 ( 12.51%) 231035929 ( 7.95%) 266.91
dns 557023 ( 8.05%) 136102581 ( 4.68%) 244.34
rip 2 ( 0.00%) 132 ( 0.00%) 66.00
realaud 1629 ( 0.02%) 137962 ( 0.00%) 84.69
halflif 17 ( 0.00%) 4393 ( 0.00%) 258.41
starcra 3 ( 0.00%) 288 ( 0.00%) 96.00
everque 42 ( 0.00%) 5329 ( 0.00%) 126.88
quake 3 ( 0.00%) 227 ( 0.00%) 75.67
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 302333 ( 4.37%) 94628391 ( 3.26%) 312.99
icmp 334037 ( 4.83%) 26468707 ( 0.91%) 79.24
ip6 1122 ( 0.02%) 231743 ( 0.01%) 206.54
other 19308 ( 0.28%) 24929426 ( 0.86%) 1291.14
frag 5332 ( 0.08%) 7506847 ( 0.26%) 1407.89
tcpdump file: 200509221800.dump.gz (197.70 MB)