Traffic Trace Info
DumpFile: 200301311400.dump
FileSize: 340.04MB
Id: 200301311400
StartTime: Fri Jan 31 14:00:00 2003
EndTime: Fri Jan 31 14:13:43 2003
TotalTime: 822.96 seconds
TotalCapSize: 264.74MB CapLen: 96 bytes
# of packets: 4934980 (2529.50MB)
AvgRate: 25.78Mbps stddev:0.54M
IP flow (unique src/dst pair) Information
# of flows: 212954 (avg. 23.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.3% 3.2% 3.0% 2.3% 2.2% 1.4% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 140319
Top 10 bandwidth usage (bytes/total in %):
10.4% 9.3% 6.1% 3.9% 3.5% 3.4% 3.1% 3.1% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200301311400.pktlen.png)
detailed numbers
[ 16- 31]: 22656
[ 32- 63]: 1445135
[ 64- 127]: 1099573
[ 128- 255]: 311151
[ 256- 511]: 235352
[ 512- 1023]: 434084
[ 1024- 2047]: 1387029
Protocol Breakdown
![[protocol breakdown chart]](200301311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4934980 (100.00%) 2652373022 (100.00%) 537.46
ip 4900251 ( 99.30%) 2651317247 ( 99.96%) 541.06
tcp 4140749 ( 83.91%) 2492887510 ( 93.99%) 602.04
http(s) 1235812 ( 25.04%) 1278270649 ( 48.19%) 1034.36
http(c) 953638 ( 19.32%) 115663084 ( 4.36%) 121.29
squid 89604 ( 1.82%) 89140259 ( 3.36%) 994.82
smtp 205188 ( 4.16%) 98150166 ( 3.70%) 478.34
nntp 39 ( 0.00%) 2510 ( 0.00%) 64.36
ftp 193743 ( 3.93%) 111186985 ( 4.19%) 573.89
pop3 3089 ( 0.06%) 874788 ( 0.03%) 283.19
imap 265 ( 0.01%) 20673 ( 0.00%) 78.01
telnet 5047 ( 0.10%) 2498444 ( 0.09%) 495.04
ssh 1879 ( 0.04%) 176245 ( 0.01%) 93.80
dns 1834 ( 0.04%) 1516546 ( 0.06%) 826.91
bgp 159 ( 0.00%) 50255 ( 0.00%) 316.07
napster 398487 ( 8.07%) 204395011 ( 7.71%) 512.93
realaud 6033 ( 0.12%) 2261711 ( 0.09%) 374.89
rtsp 6412 ( 0.13%) 3055081 ( 0.12%) 476.46
icecast 15207 ( 0.31%) 5046456 ( 0.19%) 331.85
other 1023946 ( 20.75%) 580565244 ( 21.89%) 566.99
udp 626649 ( 12.70%) 148839969 ( 5.61%) 237.52
dns 378954 ( 7.68%) 58406759 ( 2.20%) 154.13
realaud 92680 ( 1.88%) 48290039 ( 1.82%) 521.04
halflif 11 ( 0.00%) 1306 ( 0.00%) 118.73
everque 1 ( 0.00%) 73 ( 0.00%) 73.00
quake 2 ( 0.00%) 156 ( 0.00%) 78.00
cuseeme 3 ( 0.00%) 235 ( 0.00%) 78.33
other 150818 ( 3.06%) 38781716 ( 1.46%) 257.14
icmp 92276 ( 1.87%) 8065772 ( 0.30%) 87.41
ipsec 387 ( 0.01%) 87042 ( 0.00%) 224.91
ip6 431 ( 0.01%) 81918 ( 0.00%) 190.06
other 39759 ( 0.81%) 1355036 ( 0.05%) 34.08
frag 17929 ( 0.36%) 18160249 ( 0.68%) 1012.90
tcpdump file: 200301311400.dump.gz (140.19 MB)