Traffic Trace Info
DumpFile: 200301051400.dump
FileSize: 342.69MB
Id: 200301051400
StartTime: Sun Jan 5 14:00:00 2003
EndTime: Sun Jan 5 14:27:09 2003
TotalTime: 1628.77 seconds
TotalCapSize: 266.70MB CapLen: 96 bytes
# of packets: 4979639 (1993.53MB)
AvgRate: 10.27Mbps stddev:1.55M
IP flow (unique src/dst pair) Information
# of flows: 270967 (avg. 18.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 2.1% 1.4% 1.4% 1.3% 1.3% 1.3% 1.3% 1.3% 0.9%
IP address Information
# of IPv4 addresses: 197484
Top 10 bandwidth usage (bytes/total in %):
19.3% 5.1% 4.9% 4.4% 4.4% 4.0% 3.9% 2.2% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200301051400.pktlen.png)
detailed numbers
[ 16- 31]: 7573
[ 32- 63]: 1397152
[ 64- 127]: 1490985
[ 128- 255]: 383585
[ 256- 511]: 268159
[ 512- 1023]: 446775
[ 1024- 2047]: 985410
Protocol Breakdown
![[protocol breakdown chart]](200301051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4979639 (100.00%) 2090368046 (100.00%) 419.78
ip 4968141 ( 99.77%) 2090018796 ( 99.98%) 420.68
tcp 3986816 ( 80.06%) 1959453385 ( 93.74%) 491.48
http(s) 835711 ( 16.78%) 789778395 ( 37.78%) 945.04
http(c) 1028073 ( 20.65%) 109430701 ( 5.23%) 106.44
squid 3127 ( 0.06%) 868989 ( 0.04%) 277.90
smtp 83794 ( 1.68%) 18913321 ( 0.90%) 225.71
ftp 227818 ( 4.57%) 42667049 ( 2.04%) 187.29
pop3 3357 ( 0.07%) 231172 ( 0.01%) 68.86
imap 111 ( 0.00%) 7694 ( 0.00%) 69.32
telnet 979 ( 0.02%) 70012 ( 0.00%) 71.51
ssh 3698 ( 0.07%) 466680 ( 0.02%) 126.20
dns 23548 ( 0.47%) 1728208 ( 0.08%) 73.39
bgp 277 ( 0.01%) 33252 ( 0.00%) 120.04
napster 263533 ( 5.29%) 99175316 ( 4.74%) 376.33
realaud 5926 ( 0.12%) 6994729 ( 0.33%) 1180.35
rtsp 17481 ( 0.35%) 1082764 ( 0.05%) 61.94
icecast 2251 ( 0.05%) 305215 ( 0.01%) 135.59
hotline 15 ( 0.00%) 2042 ( 0.00%) 136.13
other 1486915 ( 29.86%) 887690443 ( 42.47%) 597.00
udp 872859 ( 17.53%) 119094153 ( 5.70%) 136.44
dns 386421 ( 7.76%) 65465527 ( 3.13%) 169.42
realaud 7220 ( 0.14%) 3367456 ( 0.16%) 466.41
halflif 17 ( 0.00%) 1038 ( 0.00%) 61.06
starcra 2 ( 0.00%) 132 ( 0.00%) 66.00
quake 42158 ( 0.85%) 10183422 ( 0.49%) 241.55
cuseeme 1 ( 0.00%) 92 ( 0.00%) 92.00
other 436997 ( 8.78%) 40074918 ( 1.92%) 91.71
icmp 95050 ( 1.91%) 10837160 ( 0.52%) 114.02
ip6 1004 ( 0.02%) 181933 ( 0.01%) 181.21
other 12412 ( 0.25%) 452165 ( 0.02%) 36.43
frag 2 ( 0.00%) 120 ( 0.00%) 60.00
tcpdump file: 200301051400.dump.gz (133.84 MB)