Traffic Trace Info
DumpFile: 200203251400.dump
FileSize: 293.81MB
Id: 200203251400
StartTime: Mon Mar 25 14:00:00 2002
EndTime: Mon Mar 25 14:08:19 2002
TotalTime: 498.35 seconds
TotalCapSize: 217.54MB CapLen: 96 bytes
# of packets: 4998042 (5670.15MB)
AvgRate: 95.44Mbps stddev:0.40M
IP flow (unique src/dst pair) Information
# of flows: 71289 (avg. 70.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.8% 4.5% 4.4% 2.2% 0.6% 0.6% 0.5% 0.5% 0.4% 0.3%
IP address Information
# of IPv4 addresses: 36615
Top 10 bandwidth usage (bytes/total in %):
59.2% 28.3% 13.2% 6.8% 0.9% 0.9% 0.7% 0.7% 0.7% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200203251400.pktlen.png)
detailed numbers
[ 16- 31]: 25081
[ 32- 63]: 511123
[ 64- 127]: 381866
[ 128- 255]: 74084
[ 256- 511]: 92017
[ 512- 1023]: 85328
[ 1024- 2047]: 3828543
Protocol Breakdown
![[protocol breakdown chart]](200203251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4998042 (100.00%) 5945580685 (100.00%) 1189.58
ip 4948001 ( 99.00%) 5944030962 ( 99.97%) 1201.30
tcp 1160469 ( 23.22%) 676681232 ( 11.38%) 583.11
http(s) 464550 ( 9.29%) 443413206 ( 7.46%) 954.50
http(c) 302938 ( 6.06%) 33691446 ( 0.57%) 111.22
squid 5739 ( 0.11%) 695962 ( 0.01%) 121.27
smtp 64427 ( 1.29%) 24575425 ( 0.41%) 381.45
nntp 43 ( 0.00%) 2580 ( 0.00%) 60.00
ftp 33065 ( 0.66%) 14956877 ( 0.25%) 452.35
pop3 7951 ( 0.16%) 3174488 ( 0.05%) 399.26
imap 749 ( 0.01%) 368434 ( 0.01%) 491.90
telnet 1219 ( 0.02%) 126931 ( 0.00%) 104.13
ssh 5910 ( 0.12%) 1988428 ( 0.03%) 336.45
dns 781 ( 0.02%) 59798 ( 0.00%) 76.57
bgp 106 ( 0.00%) 15156 ( 0.00%) 142.98
napster 77142 ( 1.54%) 55900182 ( 0.94%) 724.64
realaud 34 ( 0.00%) 2046 ( 0.00%) 60.18
rtsp 1694 ( 0.03%) 128318 ( 0.00%) 75.75
icecast 220 ( 0.00%) 18184 ( 0.00%) 82.65
hotline 67 ( 0.00%) 8989 ( 0.00%) 134.16
other 193493 ( 3.87%) 97542317 ( 1.64%) 504.11
udp 183126 ( 3.66%) 45615029 ( 0.77%) 249.09
dns 145875 ( 2.92%) 19497468 ( 0.33%) 133.66
rip 99 ( 0.00%) 8714 ( 0.00%) 88.02
realaud 5581 ( 0.11%) 1339687 ( 0.02%) 240.04
halflif 19 ( 0.00%) 1140 ( 0.00%) 60.00
quake 1 ( 0.00%) 86 ( 0.00%) 86.00
other 30540 ( 0.61%) 24297208 ( 0.41%) 795.59
icmp 3506100 ( 70.15%) 5213381018 ( 87.68%) 1486.95
igmp 144 ( 0.00%) 8640 ( 0.00%) 60.00
ipsec 26 ( 0.00%) 4860 ( 0.00%) 186.92
ip6 2163 ( 0.04%) 504882 ( 0.01%) 233.42
other 95973 ( 1.92%) 7835301 ( 0.13%) 81.64
frag 16623 ( 0.33%) 19365458 ( 0.33%) 1164.98
tcpdump file: 200203251400.dump.gz (90.09 MB)