Traffic Trace Info
DumpFile: 200301121400.dump
FileSize: 340.43MB
Id: 200301121400
StartTime: Sun Jan 12 14:00:00 2003
EndTime: Sun Jan 12 14:15:38 2003
TotalTime: 937.50 seconds
TotalCapSize: 264.87MB CapLen: 96 bytes
# of packets: 4951894 (2300.93MB)
AvgRate: 20.59Mbps stddev:2.64M
IP flow (unique src/dst pair) Information
# of flows: 428382 (avg. 11.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.4% 2.2% 2.1% 2.1% 1.9% 1.7% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 299446
Top 10 bandwidth usage (bytes/total in %):
7.6% 6.4% 6.3% 5.0% 4.8% 3.5% 3.3% 3.2% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200301121400.pktlen.png)
detailed numbers
[ 16- 31]: 18723
[ 32- 63]: 1717983
[ 64- 127]: 1134706
[ 128- 255]: 282477
[ 256- 511]: 236591
[ 512- 1023]: 270730
[ 1024- 2047]: 1290684
Protocol Breakdown
![[protocol breakdown chart]](200301121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4951894 (100.00%) 2412702285 (100.00%) 487.23
ip 4923249 ( 99.42%) 2411831731 ( 99.96%) 489.89
tcp 4118879 ( 83.18%) 2179510992 ( 90.33%) 529.15
http(s) 716749 ( 14.47%) 772827505 ( 32.03%) 1078.24
http(c) 710690 ( 14.35%) 76543810 ( 3.17%) 107.70
squid 4302 ( 0.09%) 549058 ( 0.02%) 127.63
smtp 68649 ( 1.39%) 21958585 ( 0.91%) 319.87
nntp 13 ( 0.00%) 1560 ( 0.00%) 120.00
ftp 211073 ( 4.26%) 108898593 ( 4.51%) 515.93
pop3 2699 ( 0.05%) 443723 ( 0.02%) 164.40
imap 216 ( 0.00%) 28476 ( 0.00%) 131.83
telnet 270 ( 0.01%) 37708 ( 0.00%) 139.66
ssh 21945 ( 0.44%) 1418232 ( 0.06%) 64.63
dns 981 ( 0.02%) 99155 ( 0.00%) 101.08
bgp 167 ( 0.00%) 25619 ( 0.00%) 153.41
napster 455187 ( 9.19%) 212232764 ( 8.80%) 466.25
rtsp 2845 ( 0.06%) 2667377 ( 0.11%) 937.57
icecast 3046 ( 0.06%) 406295 ( 0.02%) 133.39
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 1919690 ( 38.77%) 981358563 ( 40.67%) 511.21
udp 630085 ( 12.72%) 188691139 ( 7.82%) 299.47
dns 245789 ( 4.96%) 36238626 ( 1.50%) 147.44
realaud 1329 ( 0.03%) 84727 ( 0.00%) 63.75
halflif 3 ( 0.00%) 671 ( 0.00%) 223.67
quake 4 ( 0.00%) 254 ( 0.00%) 63.50
other 343040 ( 6.93%) 98220439 ( 4.07%) 286.32
icmp 85433 ( 1.73%) 7939324 ( 0.33%) 92.93
ip6 57541 ( 1.16%) 34602149 ( 1.43%) 601.35
other 31311 ( 0.63%) 1088127 ( 0.05%) 34.75
frag 80542 ( 1.63%) 115494324 ( 4.79%) 1433.96
tcpdump file: 200301121400.dump.gz (136.87 MB)