Traffic Trace Info
DumpFile: 200309041400.dump
FileSize: 313.98MB
Id: 200309041400
StartTime: Thu Sep 4 14:00:00 2003
EndTime: Thu Sep 4 14:15:00 2003
TotalTime: 900.19 seconds
TotalCapSize: 241.81MB CapLen: 96 bytes
# of packets: 4729848 (1982.82MB)
AvgRate: 18.48Mbps stddev:0.39M
IP flow (unique src/dst pair) Information
# of flows: 1723237 (avg. 2.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.0% 2.8% 1.8% 1.1% 1.1% 1.1% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 799532
Top 10 bandwidth usage (bytes/total in %):
9.0% 9.0% 3.5% 3.0% 2.8% 2.8% 2.7% 2.7% 2.3% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200309041400.pktlen.png)
detailed numbers
[ 16- 31]: 6128
[ 32- 63]: 1227893
[ 64- 127]: 1820785
[ 128- 255]: 141938
[ 256- 511]: 135041
[ 512- 1023]: 376139
[ 1024- 2047]: 1021924
Protocol Breakdown
![[protocol breakdown chart]](200309041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4729848 (100.00%) 2079138823 (100.00%) 439.58
ip 4722852 ( 99.85%) 2078932823 ( 99.99%) 440.19
tcp 3083605 ( 65.19%) 1864635814 ( 89.68%) 604.69
http(s) 1258147 ( 26.60%) 1116146001 ( 53.68%) 887.13
http(c) 272968 ( 5.77%) 23227184 ( 1.12%) 85.09
squid 3363 ( 0.07%) 1322840 ( 0.06%) 393.35
smtp 105021 ( 2.22%) 36398205 ( 1.75%) 346.58
nntp 124793 ( 2.64%) 187795647 ( 9.03%) 1504.86
ftp 122410 ( 2.59%) 66818595 ( 3.21%) 545.86
pop3 2393 ( 0.05%) 1002507 ( 0.05%) 418.93
imap 322 ( 0.01%) 31610 ( 0.00%) 98.17
telnet 2020 ( 0.04%) 500457 ( 0.02%) 247.75
ssh 1744 ( 0.04%) 1238553 ( 0.06%) 710.18
dns 119 ( 0.00%) 9711 ( 0.00%) 81.61
bgp 165 ( 0.00%) 38632 ( 0.00%) 234.13
napster 3065 ( 0.06%) 1121068 ( 0.05%) 365.76
realaud 124 ( 0.00%) 7440 ( 0.00%) 60.00
rtsp 5208 ( 0.11%) 5353255 ( 0.26%) 1027.89
icecast 5220 ( 0.11%) 955858 ( 0.05%) 183.11
other 1176421 ( 24.87%) 422663236 ( 20.33%) 359.28
udp 278129 ( 5.88%) 69023240 ( 3.32%) 248.17
dns 88686 ( 1.88%) 12561433 ( 0.60%) 141.64
realaud 15471 ( 0.33%) 7865768 ( 0.38%) 508.42
halflif 6 ( 0.00%) 360 ( 0.00%) 60.00
quake 1 ( 0.00%) 86 ( 0.00%) 86.00
other 172933 ( 3.66%) 48170271 ( 2.32%) 278.55
icmp 1296083 ( 27.40%) 133961693 ( 6.44%) 103.36
ip6 898 ( 0.02%) 304183 ( 0.01%) 338.73
other 64137 ( 1.36%) 11007893 ( 0.53%) 171.63
frag 7457 ( 0.16%) 7128828 ( 0.34%) 955.99
tcpdump file: 200309041400.dump.gz (128.89 MB)