Traffic Trace Info
DumpFile: 200301111400.dump
FileSize: 339.22MB
Id: 200301111400
StartTime: Sat Jan 11 14:00:00 2003
EndTime: Sat Jan 11 14:16:12 2003
TotalTime: 972.25 seconds
TotalCapSize: 263.82MB CapLen: 96 bytes
# of packets: 4941157 (2482.73MB)
AvgRate: 21.42Mbps stddev:1.48M
IP flow (unique src/dst pair) Information
# of flows: 253830 (avg. 19.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.8% 2.3% 2.1% 1.8% 1.7% 1.6% 1.5% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 186658
Top 10 bandwidth usage (bytes/total in %):
9.8% 7.6% 4.5% 3.3% 3.2% 3.1% 2.9% 2.9% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200301111400.pktlen.png)
detailed numbers
[ 16- 31]: 17190
[ 32- 63]: 1481303
[ 64- 127]: 1180391
[ 128- 255]: 275761
[ 256- 511]: 225201
[ 512- 1023]: 358395
[ 1024- 2047]: 1402916
Protocol Breakdown
![[protocol breakdown chart]](200301111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4941157 (100.00%) 2603333682 (100.00%) 526.87
ip 4915868 ( 99.49%) 2602567942 ( 99.97%) 529.42
tcp 4134227 ( 83.67%) 2466311635 ( 94.74%) 596.56
http(s) 1166134 ( 23.60%) 1152305060 ( 44.26%) 988.14
http(c) 956494 ( 19.36%) 109039199 ( 4.19%) 114.00
squid 130906 ( 2.65%) 127225199 ( 4.89%) 971.88
smtp 84778 ( 1.72%) 28277762 ( 1.09%) 333.55
nntp 13 ( 0.00%) 821 ( 0.00%) 63.15
ftp 217192 ( 4.40%) 94761492 ( 3.64%) 436.30
pop3 5586 ( 0.11%) 1889325 ( 0.07%) 338.23
imap 271 ( 0.01%) 33803 ( 0.00%) 124.73
telnet 1159 ( 0.02%) 73533 ( 0.00%) 63.45
ssh 5045 ( 0.10%) 670406 ( 0.03%) 132.89
dns 1137 ( 0.02%) 293790 ( 0.01%) 258.39
bgp 178 ( 0.00%) 30005 ( 0.00%) 168.57
napster 532840 ( 10.78%) 235665152 ( 9.05%) 442.28
realaud 6 ( 0.00%) 799 ( 0.00%) 133.17
rtsp 12488 ( 0.25%) 8111246 ( 0.31%) 649.52
icecast 7182 ( 0.15%) 690109 ( 0.03%) 96.09
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 1012487 ( 20.49%) 707231171 ( 27.17%) 698.51
udp 642103 ( 12.99%) 125415873 ( 4.82%) 195.32
dns 307923 ( 6.23%) 51884594 ( 1.99%) 168.50
realaud 1085 ( 0.02%) 902680 ( 0.03%) 831.96
halflif 5 ( 0.00%) 300 ( 0.00%) 60.00
starcra 52 ( 0.00%) 5326 ( 0.00%) 102.42
quake 2 ( 0.00%) 120 ( 0.00%) 60.00
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 326561 ( 6.61%) 64068357 ( 2.46%) 196.19
icmp 113026 ( 2.29%) 9848731 ( 0.38%) 87.14
ip6 509 ( 0.01%) 85419 ( 0.00%) 167.82
other 26003 ( 0.53%) 906284 ( 0.03%) 34.85
frag 32932 ( 0.67%) 40161466 ( 1.54%) 1219.53
tcpdump file: 200301111400.dump.gz (135.02 MB)