Traffic Trace Info
DumpFile: 200301281400.dump
FileSize: 340.65MB
Id: 200301281400
StartTime: Tue Jan 28 14:00:00 2003
EndTime: Tue Jan 28 14:14:31 2003
TotalTime: 870.50 seconds
TotalCapSize: 265.18MB CapLen: 96 bytes
# of packets: 4946361 (2268.08MB)
AvgRate: 21.86Mbps stddev:1.53M
IP flow (unique src/dst pair) Information
# of flows: 261126 (avg. 18.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 2.7% 1.9% 1.5% 1.3% 1.0% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 180101
Top 10 bandwidth usage (bytes/total in %):
6.5% 6.4% 3.0% 2.7% 2.7% 2.4% 2.3% 1.9% 1.9% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200301281400.pktlen.png)
detailed numbers
[ 16- 31]: 17642
[ 32- 63]: 1403871
[ 64- 127]: 1355299
[ 128- 255]: 320443
[ 256- 511]: 269116
[ 512- 1023]: 377206
[ 1024- 2047]: 1202784
Protocol Breakdown
![[protocol breakdown chart]](200301281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4946361 (100.00%) 2378254479 (100.00%) 480.81
ip 4920254 ( 99.47%) 2377463569 ( 99.97%) 483.20
tcp 3914337 ( 79.14%) 2216677080 ( 93.21%) 566.30
http(s) 1508629 ( 30.50%) 1403436300 ( 59.01%) 930.27
http(c) 912170 ( 18.44%) 105831436 ( 4.45%) 116.02
squid 31802 ( 0.64%) 7250418 ( 0.30%) 227.99
smtp 257424 ( 5.20%) 112211244 ( 4.72%) 435.90
nntp 67 ( 0.00%) 4522 ( 0.00%) 67.49
ftp 168352 ( 3.40%) 107992658 ( 4.54%) 641.47
pop3 6544 ( 0.13%) 3110157 ( 0.13%) 475.27
imap 490 ( 0.01%) 64986 ( 0.00%) 132.62
telnet 3935 ( 0.08%) 927249 ( 0.04%) 235.64
ssh 1842 ( 0.04%) 306657 ( 0.01%) 166.48
dns 740 ( 0.01%) 52726 ( 0.00%) 71.25
bgp 162 ( 0.00%) 34691 ( 0.00%) 214.14
napster 433896 ( 8.77%) 175508665 ( 7.38%) 404.49
realaud 38 ( 0.00%) 3186 ( 0.00%) 83.84
rtsp 2412 ( 0.05%) 270191 ( 0.01%) 112.02
icecast 2915 ( 0.06%) 2843309 ( 0.12%) 975.41
other 582592 ( 11.78%) 296816723 ( 12.48%) 509.48
udp 840789 ( 17.00%) 148098144 ( 6.23%) 176.14
dns 464616 ( 9.39%) 70125301 ( 2.95%) 150.93
realaud 17012 ( 0.34%) 10638593 ( 0.45%) 625.36
halflif 1 ( 0.00%) 60 ( 0.00%) 60.00
starcra 4 ( 0.00%) 433 ( 0.00%) 108.25
everque 2 ( 0.00%) 122 ( 0.00%) 61.00
quake 2 ( 0.00%) 152 ( 0.00%) 76.00
other 353630 ( 7.15%) 61855574 ( 2.60%) 174.92
icmp 137457 ( 2.78%) 11686984 ( 0.49%) 85.02
ip6 632 ( 0.01%) 72705 ( 0.00%) 115.04
other 27039 ( 0.55%) 928656 ( 0.04%) 34.35
frag 26408 ( 0.53%) 27728859 ( 1.17%) 1050.02
tcpdump file: 200301281400.dump.gz (129.49 MB)