Traffic Trace Info
DumpFile: 200305241400.dump
FileSize: 196.88MB
Id: 200305241400
StartTime: Sat May 24 14:00:00 2003
EndTime: Sat May 24 14:15:00 2003
TotalTime: 899.90 seconds
TotalCapSize: 152.56MB CapLen: 96 bytes
# of packets: 2904977 (1746.16MB)
AvgRate: 16.28Mbps stddev:1.45M
IP flow (unique src/dst pair) Information
# of flows: 189476 (avg. 15.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 4.1% 3.8% 2.2% 1.5% 1.4% 1.4% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 164790
Top 10 bandwidth usage (bytes/total in %):
10.8% 8.6% 6.0% 4.9% 4.6% 4.4% 4.4% 4.3% 4.1% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200305241400.pktlen.png)
detailed numbers
[ 16- 31]: 3300
[ 32- 63]: 846729
[ 64- 127]: 597446
[ 128- 255]: 104821
[ 256- 511]: 116347
[ 512- 1023]: 208952
[ 1024- 2047]: 1027382
Protocol Breakdown
![[protocol breakdown chart]](200305241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2904977 (100.00%) 1830981135 (100.00%) 630.29
ip 2900916 ( 99.86%) 1830860304 ( 99.99%) 631.13
tcp 2409491 ( 82.94%) 1689126026 ( 92.25%) 701.03
http(s) 772935 ( 26.61%) 731394612 ( 39.95%) 946.26
http(c) 123428 ( 4.25%) 11393847 ( 0.62%) 92.31
squid 1582 ( 0.05%) 1203973 ( 0.07%) 761.04
smtp 56303 ( 1.94%) 14758550 ( 0.81%) 262.13
nntp 8 ( 0.00%) 480 ( 0.00%) 60.00
ftp 27372 ( 0.94%) 20238385 ( 1.11%) 739.38
pop3 1137 ( 0.04%) 395149 ( 0.02%) 347.54
imap 64 ( 0.00%) 4822 ( 0.00%) 75.34
telnet 633 ( 0.02%) 44528 ( 0.00%) 70.34
ssh 7437 ( 0.26%) 513596 ( 0.03%) 69.06
dns 184 ( 0.01%) 16198 ( 0.00%) 88.03
bgp 157 ( 0.01%) 26733 ( 0.00%) 170.27
napster 95026 ( 3.27%) 41711098 ( 2.28%) 438.94
rtsp 17347 ( 0.60%) 13884849 ( 0.76%) 800.42
icecast 208 ( 0.01%) 23219 ( 0.00%) 111.63
other 1305604 ( 44.94%) 853513565 ( 46.62%) 653.73
udp 391024 ( 13.46%) 124022830 ( 6.77%) 317.17
dns 138920 ( 4.78%) 15464884 ( 0.84%) 111.32
rip 90 ( 0.00%) 5940 ( 0.00%) 66.00
realaud 2120 ( 0.07%) 1145420 ( 0.06%) 540.29
halflif 82854 ( 2.85%) 10112145 ( 0.55%) 122.05
quake 1 ( 0.00%) 92 ( 0.00%) 92.00
other 156865 ( 5.40%) 82657840 ( 4.51%) 526.94
icmp 23731 ( 0.82%) 2206267 ( 0.12%) 92.97
ip6 432 ( 0.01%) 76154 ( 0.00%) 176.28
pim 2 ( 0.00%) 120 ( 0.00%) 60.00
other 76236 ( 2.62%) 15428907 ( 0.84%) 202.38
frag 56459 ( 1.94%) 69744580 ( 3.81%) 1235.31
tcpdump file: 200305241400.dump.gz (73.60 MB)