Traffic Trace Info
DumpFile: 200604091400.dump
FileSize: 396.08MB
Id: 200604091400
StartTime: Sun Apr 9 14:00:00 2006
EndTime: Sun Apr 9 14:15:00 2006
TotalTime: 899.54 seconds
TotalCapSize: 309.76MB CapLen: 96 bytes
# of packets: 5654040 (2343.17MB)
AvgRate: 21.85Mbps stddev:1.19M
IP flow (unique src/dst pair) Information
# of flows: 391312 (avg. 14.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.8% 9.3% 1.9% 1.6% 1.4% 0.9% 0.9% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 284867
Top 10 bandwidth usage (bytes/total in %):
20.3% 19.0% 16.0% 12.9% 9.6% 3.1% 2.2% 2.0% 2.0% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200604091400.pktlen.png)
detailed numbers
[ 16- 31]: 43052
[ 32- 63]: 2005767
[ 64- 127]: 1686127
[ 128- 255]: 239802
[ 256- 511]: 178253
[ 512- 1023]: 162302
[ 1024- 2047]: 1338737
Protocol Breakdown
![[protocol breakdown chart]](200604091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5654040 (100.00%) 2456987563 (100.00%) 434.55
ip 5570330 ( 98.52%) 2454480125 ( 99.90%) 440.63
tcp 4745308 ( 83.93%) 2305037608 ( 93.82%) 485.75
http(s) 575371 ( 10.18%) 619206943 ( 25.20%) 1076.19
http(c) 1486749 ( 26.30%) 123740892 ( 5.04%) 83.23
squid 121941 ( 2.16%) 94990175 ( 3.87%) 778.98
smtp 197948 ( 3.50%) 57652502 ( 2.35%) 291.25
nntp 156 ( 0.00%) 13572 ( 0.00%) 87.00
ftp 16076 ( 0.28%) 1047181 ( 0.04%) 65.14
pop3 2047 ( 0.04%) 579208 ( 0.02%) 282.95
imap 1130 ( 0.02%) 89807 ( 0.00%) 79.48
telnet 185 ( 0.00%) 14400 ( 0.00%) 77.84
ssh 33593 ( 0.59%) 2098487 ( 0.09%) 62.47
dns 3750 ( 0.07%) 267662 ( 0.01%) 71.38
bgp 254 ( 0.00%) 134419 ( 0.01%) 529.21
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 4302 ( 0.08%) 4249451 ( 0.17%) 987.78
rtsp 80836 ( 1.43%) 34789634 ( 1.42%) 430.37
icecast 5906 ( 0.10%) 392493 ( 0.02%) 66.46
other 2202528 ( 38.95%) 1365339084 ( 55.57%) 619.90
udp 681346 ( 12.05%) 136208290 ( 5.54%) 199.91
dns 463366 ( 8.20%) 91400947 ( 3.72%) 197.25
realaud 188 ( 0.00%) 77939 ( 0.00%) 414.57
halflif 4 ( 0.00%) 352 ( 0.00%) 88.00
starcra 10 ( 0.00%) 1525 ( 0.00%) 152.50
everque 10 ( 0.00%) 1832 ( 0.00%) 183.20
unreal 5 ( 0.00%) 541 ( 0.00%) 108.20
quake 11 ( 0.00%) 800 ( 0.00%) 72.73
cuseeme 3 ( 0.00%) 343 ( 0.00%) 114.33
other 215208 ( 3.81%) 44635745 ( 1.82%) 207.41
icmp 141295 ( 2.50%) 12915412 ( 0.53%) 91.41
ip6 783 ( 0.01%) 90807 ( 0.00%) 115.97
other 1598 ( 0.03%) 228008 ( 0.01%) 142.68
frag 736 ( 0.01%) 525493 ( 0.02%) 713.99
tcpdump file: 200604091400.dump.gz (153.31 MB)