Traffic Trace Info
DumpFile: 200308011400.dump
FileSize: 243.05MB
Id: 200308011400
StartTime: Fri Aug 1 14:00:00 2003
EndTime: Fri Aug 1 14:15:00 2003
TotalTime: 900.47 seconds
TotalCapSize: 189.94MB CapLen: 96 bytes
# of packets: 3480295 (1909.96MB)
AvgRate: 17.80Mbps stddev:1.91M
IP flow (unique src/dst pair) Information
# of flows: 305070 (avg. 11.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 5.4% 4.3% 3.6% 2.1% 2.1% 1.9% 1.6% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 272370
Top 10 bandwidth usage (bytes/total in %):
10.1% 7.8% 7.0% 6.5% 5.4% 4.4% 4.3% 3.7% 3.1% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200308011400.pktlen.png)
detailed numbers
[ 16- 31]: 4363
[ 32- 63]: 1189022
[ 64- 127]: 746640
[ 128- 255]: 105462
[ 256- 511]: 139856
[ 512- 1023]: 159868
[ 1024- 2047]: 1135084
Protocol Breakdown
![[protocol breakdown chart]](200308011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3480295 (100.00%) 2002739357 (100.00%) 575.45
ip 3474941 ( 99.85%) 2002580388 ( 99.99%) 576.29
tcp 2953124 ( 84.85%) 1904365516 ( 95.09%) 644.86
http(s) 1281065 ( 36.81%) 1469948054 ( 73.40%) 1147.44
http(c) 440788 ( 12.67%) 36548512 ( 1.82%) 82.92
squid 9767 ( 0.28%) 12188443 ( 0.61%) 1247.92
smtp 63721 ( 1.83%) 20049331 ( 1.00%) 314.64
nntp 10971 ( 0.32%) 13759670 ( 0.69%) 1254.19
ftp 21006 ( 0.60%) 17075520 ( 0.85%) 812.89
pop3 3494 ( 0.10%) 595691 ( 0.03%) 170.49
imap 109 ( 0.00%) 9531 ( 0.00%) 87.44
telnet 959 ( 0.03%) 122413 ( 0.01%) 127.65
ssh 4434 ( 0.13%) 461381 ( 0.02%) 104.06
dns 1249 ( 0.04%) 82118 ( 0.00%) 65.75
bgp 361 ( 0.01%) 192841 ( 0.01%) 534.19
napster 25352 ( 0.73%) 9509442 ( 0.47%) 375.10
realaud 16 ( 0.00%) 982 ( 0.00%) 61.38
rtsp 7094 ( 0.20%) 7520558 ( 0.38%) 1060.13
icecast 415 ( 0.01%) 81761 ( 0.00%) 197.01
hotline 8 ( 0.00%) 490 ( 0.00%) 61.25
other 1082235 ( 31.10%) 316215768 ( 15.79%) 292.19
udp 319017 ( 9.17%) 75606386 ( 3.78%) 237.00
dns 156947 ( 4.51%) 20436915 ( 1.02%) 130.22
realaud 20109 ( 0.58%) 14135083 ( 0.71%) 702.92
halflif 2 ( 0.00%) 120 ( 0.00%) 60.00
quake 3 ( 0.00%) 276 ( 0.00%) 92.00
other 141901 ( 4.08%) 41015780 ( 2.05%) 289.05
icmp 68255 ( 1.96%) 5155089 ( 0.26%) 75.53
ipsec 403 ( 0.01%) 75242 ( 0.00%) 186.70
ip6 648 ( 0.02%) 151305 ( 0.01%) 233.50
other 133494 ( 3.84%) 17226850 ( 0.86%) 129.05
frag 5881 ( 0.17%) 6576570 ( 0.33%) 1118.27
tcpdump file: 200308011400.dump.gz (90.13 MB)