Traffic Trace Info
DumpFile: 200306011400.dump
FileSize: 129.80MB
Id: 200306011400
StartTime: Sun Jun 1 14:00:00 2003
EndTime: Sun Jun 1 14:15:00 2003
TotalTime: 899.96 seconds
TotalCapSize: 100.34MB CapLen: 96 bytes
# of packets: 1930772 (766.03MB)
AvgRate: 7.14Mbps stddev:1.26M
IP flow (unique src/dst pair) Information
# of flows: 324234 (avg. 5.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.9% 3.0% 3.0% 2.0% 1.8% 1.8% 1.7% 1.6% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 268635
Top 10 bandwidth usage (bytes/total in %):
20.9% 20.9% 5.1% 3.0% 3.0% 3.0% 2.9% 2.6% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200306011400.pktlen.png)
detailed numbers
[ 16- 31]: 905
[ 32- 63]: 673076
[ 64- 127]: 457793
[ 128- 255]: 122008
[ 256- 511]: 192407
[ 512- 1023]: 97008
[ 1024- 2047]: 387575
Protocol Breakdown
![[protocol breakdown chart]](200306011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 1930772 (100.00%) 803240952 (100.00%) 416.02
ip 1929750 ( 99.95%) 803210917 (100.00%) 416.23
tcp 1324805 ( 68.62%) 687551690 ( 85.60%) 518.98
http(s) 326729 ( 16.92%) 313145773 ( 38.99%) 958.43
http(c) 170394 ( 8.83%) 14073567 ( 1.75%) 82.59
squid 6552 ( 0.34%) 7397938 ( 0.92%) 1129.11
smtp 40832 ( 2.11%) 6536419 ( 0.81%) 160.08
nntp 19 ( 0.00%) 1944 ( 0.00%) 102.32
ftp 29163 ( 1.51%) 8775215 ( 1.09%) 300.90
pop3 1111 ( 0.06%) 429847 ( 0.05%) 386.90
imap 16 ( 0.00%) 1276 ( 0.00%) 79.75
telnet 2478 ( 0.13%) 236363 ( 0.03%) 95.38
ssh 52 ( 0.00%) 4033 ( 0.00%) 77.56
dns 906 ( 0.05%) 66336 ( 0.01%) 73.22
bgp 162 ( 0.01%) 34356 ( 0.00%) 212.07
napster 1994 ( 0.10%) 711921 ( 0.09%) 357.03
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 14832 ( 0.77%) 17589834 ( 2.19%) 1185.94
icecast 400 ( 0.02%) 58071 ( 0.01%) 145.18
other 729142 ( 37.76%) 318487771 ( 39.65%) 436.80
udp 518266 ( 26.84%) 107240118 ( 13.35%) 206.92
dns 207494 ( 10.75%) 28078434 ( 3.50%) 135.32
realaud 2159 ( 0.11%) 2485047 ( 0.31%) 1151.02
halflif 80119 ( 4.15%) 8196150 ( 1.02%) 102.30
everque 5 ( 0.00%) 369 ( 0.00%) 73.80
quake 2 ( 0.00%) 164 ( 0.00%) 82.00
cuseeme 1 ( 0.00%) 73 ( 0.00%) 73.00
other 228472 ( 11.83%) 68479374 ( 8.53%) 299.73
icmp 72428 ( 3.75%) 6386801 ( 0.80%) 88.18
ip6 457 ( 0.02%) 78039 ( 0.01%) 170.76
other 13794 ( 0.71%) 1954269 ( 0.24%) 141.68
frag 2775 ( 0.14%) 2407196 ( 0.30%) 867.46
tcpdump file: 200306011400.dump.gz (47.96 MB)