Traffic Trace Info
DumpFile: 200302151400.dump
FileSize: 325.28MB
Id: 200302151400
StartTime: Sat Feb 15 14:00:00 2003
EndTime: Sat Feb 15 14:18:09 2003
TotalTime: 1088.71 seconds
TotalCapSize: 249.81MB CapLen: 96 bytes
# of packets: 4946067 (3287.73MB)
AvgRate: 25.33Mbps stddev:1.51M
IP flow (unique src/dst pair) Information
# of flows: 276536 (avg. 17.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
44.6% 2.0% 2.0% 1.7% 1.1% 0.7% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 207709
Top 10 bandwidth usage (bytes/total in %):
44.6% 44.6% 2.1% 2.0% 2.0% 2.0% 2.0% 1.9% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200302151400.pktlen.png)
detailed numbers
[ 16- 31]: 19553
[ 32- 63]: 1148914
[ 64- 127]: 1015303
[ 128- 255]: 266349
[ 256- 511]: 172465
[ 512- 1023]: 225192
[ 1024- 2047]: 2098291
Protocol Breakdown
![[protocol breakdown chart]](200302151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4946067 (100.00%) 3447434134 (100.00%) 697.01
ip 4915808 ( 99.39%) 3446513818 ( 99.97%) 701.11
tcp 3032413 ( 61.31%) 1778604566 ( 51.59%) 586.53
http(s) 976795 ( 19.75%) 965841226 ( 28.02%) 988.79
http(c) 718905 ( 14.53%) 89901159 ( 2.61%) 125.05
squid 14260 ( 0.29%) 7350745 ( 0.21%) 515.48
smtp 100886 ( 2.04%) 37911347 ( 1.10%) 375.78
nntp 81 ( 0.00%) 5299 ( 0.00%) 65.42
ftp 140436 ( 2.84%) 32160701 ( 0.93%) 229.01
pop3 2609 ( 0.05%) 595562 ( 0.02%) 228.27
imap 202 ( 0.00%) 15801 ( 0.00%) 78.22
telnet 1557 ( 0.03%) 100675 ( 0.00%) 64.66
ssh 910 ( 0.02%) 94522 ( 0.00%) 103.87
dns 536 ( 0.01%) 39117 ( 0.00%) 72.98
bgp 189 ( 0.00%) 25890 ( 0.00%) 136.98
napster 301286 ( 6.09%) 143262061 ( 4.16%) 475.50
realaud 48 ( 0.00%) 4163 ( 0.00%) 86.73
rtsp 8192 ( 0.17%) 5131207 ( 0.15%) 626.37
icecast 354 ( 0.01%) 36214 ( 0.00%) 102.30
hotline 16 ( 0.00%) 2104 ( 0.00%) 131.50
other 764994 ( 15.47%) 496120976 ( 14.39%) 648.53
udp 1730146 ( 34.98%) 1656099594 ( 48.04%) 957.20
dns 393362 ( 7.95%) 53937367 ( 1.56%) 137.12
halflif 4 ( 0.00%) 240 ( 0.00%) 60.00
everque 24 ( 0.00%) 2226 ( 0.00%) 92.75
quake 1 ( 0.00%) 86 ( 0.00%) 86.00
other 1328877 ( 26.87%) 1590588738 ( 46.14%) 1196.94
icmp 121551 ( 2.46%) 10668254 ( 0.31%) 87.77
ip6 591 ( 0.01%) 83554 ( 0.00%) 141.38
other 31107 ( 0.63%) 1057850 ( 0.03%) 34.01
frag 39178 ( 0.79%) 43994387 ( 1.28%) 1122.94
tcpdump file: 200302151400.dump.gz (122.58 MB)