Traffic Trace Info
DumpFile: 200306051400.dump
FileSize: 220.94MB
Id: 200306051400
StartTime: Thu Jun 5 14:00:01 2003
EndTime: Thu Jun 5 14:15:00 2003
TotalTime: 899.18 seconds
TotalCapSize: 171.41MB CapLen: 96 bytes
# of packets: 3245845 (1976.30MB)
AvgRate: 18.44Mbps stddev:0.38M
IP flow (unique src/dst pair) Information
# of flows: 309836 (avg. 10.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.7% 3.5% 1.2% 1.1% 1.0% 0.9% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 262112
Top 10 bandwidth usage (bytes/total in %):
13.7% 13.7% 4.5% 3.7% 3.5% 3.3% 2.1% 2.0% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200306051400.pktlen.png)
detailed numbers
[ 16- 31]: 2108
[ 32- 63]: 756082
[ 64- 127]: 677777
[ 128- 255]: 199173
[ 256- 511]: 231503
[ 512- 1023]: 253431
[ 1024- 2047]: 1125771
Protocol Breakdown
![[protocol breakdown chart]](200306051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3245845 (100.00%) 2072297161 (100.00%) 638.45
ip 3243572 ( 99.93%) 2072230765 (100.00%) 638.87
tcp 2597697 ( 80.03%) 1912708854 ( 92.30%) 736.31
http(s) 1532141 ( 47.20%) 1547549610 ( 74.68%) 1010.06
http(c) 218897 ( 6.74%) 21233044 ( 1.02%) 97.00
squid 12190 ( 0.38%) 10238596 ( 0.49%) 839.92
smtp 67247 ( 2.07%) 24962062 ( 1.20%) 371.20
nntp 2522 ( 0.08%) 258319 ( 0.01%) 102.43
ftp 19917 ( 0.61%) 6286967 ( 0.30%) 315.66
pop3 3172 ( 0.10%) 1014761 ( 0.05%) 319.91
imap 227 ( 0.01%) 68152 ( 0.00%) 300.23
telnet 1022 ( 0.03%) 121162 ( 0.01%) 118.55
ssh 3493 ( 0.11%) 2715736 ( 0.13%) 777.48
dns 549 ( 0.02%) 40919 ( 0.00%) 74.53
bgp 166 ( 0.01%) 29537 ( 0.00%) 177.93
napster 91502 ( 2.82%) 29943101 ( 1.44%) 327.24
realaud 50 ( 0.00%) 3000 ( 0.00%) 60.00
rtsp 7349 ( 0.23%) 4011305 ( 0.19%) 545.83
icecast 1017 ( 0.03%) 123091 ( 0.01%) 121.03
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 636197 ( 19.60%) 264107911 ( 12.74%) 415.14
udp 593938 ( 18.30%) 144530521 ( 6.97%) 243.34
dns 224599 ( 6.92%) 25294586 ( 1.22%) 112.62
realaud 6093 ( 0.19%) 3243196 ( 0.16%) 532.28
halflif 1 ( 0.00%) 75 ( 0.00%) 75.00
everque 1 ( 0.00%) 91 ( 0.00%) 91.00
quake 7 ( 0.00%) 624 ( 0.00%) 89.14
other 353146 ( 10.88%) 104207339 ( 5.03%) 295.08
icmp 28339 ( 0.87%) 2940841 ( 0.14%) 103.77
ip6 461 ( 0.01%) 80560 ( 0.00%) 174.75
other 23137 ( 0.71%) 11969989 ( 0.58%) 517.35
frag 35727 ( 1.10%) 37445877 ( 1.81%) 1048.11
tcpdump file: 200306051400.dump.gz (89.94 MB)