Traffic Trace Info
DumpFile: 200303131400.dump
FileSize: 318.51MB
Id: 200303131400
StartTime: Thu Mar 13 14:00:00 2003
EndTime: Thu Mar 13 14:15:00 2003
TotalTime: 899.90 seconds
TotalCapSize: 248.68MB CapLen: 96 bytes
# of packets: 4575732 (2190.53MB)
AvgRate: 20.42Mbps stddev:1.41M
IP flow (unique src/dst pair) Information
# of flows: 317167 (avg. 14.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.2% 2.0% 1.9% 1.5% 1.3% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 226629
Top 10 bandwidth usage (bytes/total in %):
8.5% 6.0% 5.3% 4.1% 3.3% 2.8% 2.8% 2.6% 2.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200303131400.pktlen.png)
detailed numbers
[ 16- 31]: 16748
[ 32- 63]: 1288157
[ 64- 127]: 1193305
[ 128- 255]: 275191
[ 256- 511]: 274556
[ 512- 1023]: 341653
[ 1024- 2047]: 1186122
Protocol Breakdown
![[protocol breakdown chart]](200303131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4575732 (100.00%) 2296935276 (100.00%) 501.98
ip 4550942 ( 99.46%) 2296183995 ( 99.97%) 504.55
tcp 3762817 ( 82.23%) 2169463264 ( 94.45%) 576.55
http(s) 1058343 ( 23.13%) 999067446 ( 43.50%) 943.99
http(c) 1081112 ( 23.63%) 125667841 ( 5.47%) 116.24
squid 84279 ( 1.84%) 106515977 ( 4.64%) 1263.85
smtp 137022 ( 2.99%) 52320678 ( 2.28%) 381.84
nntp 14 ( 0.00%) 1098 ( 0.00%) 78.43
ftp 218323 ( 4.77%) 121523383 ( 5.29%) 556.62
pop3 5536 ( 0.12%) 1459542 ( 0.06%) 263.65
imap 640 ( 0.01%) 106240 ( 0.00%) 166.00
telnet 1053 ( 0.02%) 84331 ( 0.00%) 80.09
ssh 1130 ( 0.02%) 273520 ( 0.01%) 242.05
dns 13369 ( 0.29%) 14127485 ( 0.62%) 1056.73
bgp 159 ( 0.00%) 33401 ( 0.00%) 210.07
napster 173475 ( 3.79%) 66782296 ( 2.91%) 384.97
realaud 64 ( 0.00%) 5902 ( 0.00%) 92.22
rtsp 10452 ( 0.23%) 6773791 ( 0.29%) 648.09
icecast 361 ( 0.01%) 42200 ( 0.00%) 116.90
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 977177 ( 21.36%) 674665996 ( 29.37%) 690.42
udp 579841 ( 12.67%) 110797864 ( 4.82%) 191.08
dns 373884 ( 8.17%) 60529396 ( 2.64%) 161.89
realaud 23884 ( 0.52%) 11126140 ( 0.48%) 465.84
halflif 4 ( 0.00%) 240 ( 0.00%) 60.00
quake 37524 ( 0.82%) 7954291 ( 0.35%) 211.98
other 143230 ( 3.13%) 29360129 ( 1.28%) 204.99
icmp 181222 ( 3.96%) 14908751 ( 0.65%) 82.27
ip6 861 ( 0.02%) 123049 ( 0.01%) 142.91
other 26201 ( 0.57%) 891067 ( 0.04%) 34.01
frag 7513 ( 0.16%) 7791303 ( 0.34%) 1037.04
tcpdump file: 200303131400.dump.gz (129.50 MB)