Traffic Trace Info
DumpFile: 200603281400.dump
FileSize: 572.21MB
Id: 200603281400
StartTime: Tue Mar 28 14:00:00 2006
EndTime: Tue Mar 28 14:15:01 2006
TotalTime: 900.30 seconds
TotalCapSize: 447.22MB CapLen: 96 bytes
# of packets: 8187604 (3129.63MB)
AvgRate: 29.16Mbps stddev:1.03M
IP flow (unique src/dst pair) Information
# of flows: 388666 (avg. 21.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.1% 1.8% 1.7% 1.4% 1.2% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 249796
Top 10 bandwidth usage (bytes/total in %):
11.8% 9.8% 9.0% 5.0% 3.8% 3.7% 3.4% 3.3% 2.4% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200603281400.pktlen.png)
detailed numbers
[ 16- 31]: 88951
[ 32- 63]: 2518673
[ 64- 127]: 2993514
[ 128- 255]: 318742
[ 256- 511]: 261068
[ 512- 1023]: 234367
[ 1024- 2047]: 1772289
Protocol Breakdown
![[protocol breakdown chart]](200603281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8187604 (100.00%) 3281660083 (100.00%) 400.81
ip 8009626 ( 97.83%) 3276311251 ( 99.84%) 409.05
tcp 6763892 ( 82.61%) 2962194162 ( 90.27%) 437.94
http(s) 1264878 ( 15.45%) 1428641167 ( 43.53%) 1129.47
http(c) 2674072 ( 32.66%) 270354451 ( 8.24%) 101.10
squid 102424 ( 1.25%) 50905703 ( 1.55%) 497.01
smtp 243521 ( 2.97%) 65184388 ( 1.99%) 267.67
nntp 30 ( 0.00%) 2351 ( 0.00%) 78.37
ftp 97281 ( 1.19%) 13606219 ( 0.41%) 139.87
pop3 5108 ( 0.06%) 2635919 ( 0.08%) 516.04
imap 3154 ( 0.04%) 992551 ( 0.03%) 314.70
telnet 1939 ( 0.02%) 196083 ( 0.01%) 101.13
ssh 17553 ( 0.21%) 3339060 ( 0.10%) 190.23
dns 5839 ( 0.07%) 518641 ( 0.02%) 88.82
bgp 137 ( 0.00%) 47137 ( 0.00%) 344.07
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 8 ( 0.00%) 1107 ( 0.00%) 138.38
rtsp 62882 ( 0.77%) 33840719 ( 1.03%) 538.16
icecast 46903 ( 0.57%) 26611782 ( 0.81%) 567.38
other 2207592 ( 26.96%) 1064263862 ( 32.43%) 482.09
udp 957115 ( 11.69%) 266973045 ( 8.14%) 278.94
dns 608288 ( 7.43%) 121975148 ( 3.72%) 200.52
realaud 2477 ( 0.03%) 187116 ( 0.01%) 75.54
halflif 2 ( 0.00%) 173 ( 0.00%) 86.50
everque 4 ( 0.00%) 366 ( 0.00%) 91.50
unreal 8 ( 0.00%) 1245 ( 0.00%) 155.62
quake 3 ( 0.00%) 190 ( 0.00%) 63.33
cuseeme 2 ( 0.00%) 176 ( 0.00%) 88.00
other 339510 ( 4.15%) 144573007 ( 4.41%) 425.83
icmp 119560 ( 1.46%) 11973244 ( 0.36%) 100.14
ipsec 1207 ( 0.01%) 223067 ( 0.01%) 184.81
ip6 1099 ( 0.01%) 124035 ( 0.00%) 112.86
other 166753 ( 2.04%) 34823698 ( 1.06%) 208.83
frag 40 ( 0.00%) 26817 ( 0.00%) 670.42
tcpdump file: 200603281400.dump.gz (228.25 MB)