Traffic Trace Info
DumpFile: 200309201400.dump
FileSize: 276.80MB
Id: 200309201400
StartTime: Sat Sep 20 14:00:00 2003
EndTime: Sat Sep 20 14:15:00 2003
TotalTime: 899.49 seconds
TotalCapSize: 212.00MB CapLen: 96 bytes
# of packets: 4246521 (1305.51MB)
AvgRate: 12.17Mbps stddev:1.26M
IP flow (unique src/dst pair) Information
# of flows: 1911668 (avg. 2.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.1% 5.9% 4.9% 2.0% 1.9% 1.8% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 901008
Top 10 bandwidth usage (bytes/total in %):
10.1% 10.1% 6.5% 5.9% 5.6% 4.9% 4.9% 4.1% 3.8% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200309201400.pktlen.png)
detailed numbers
[ 16- 31]: 4290
[ 32- 63]: 1314728
[ 64- 127]: 1927087
[ 128- 255]: 84921
[ 256- 511]: 129224
[ 512- 1023]: 151169
[ 1024- 2047]: 635102
Protocol Breakdown
![[protocol breakdown chart]](200309201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4246521 (100.00%) 1368925972 (100.00%) 322.36
ip 4241819 ( 99.89%) 1368788378 ( 99.99%) 322.69
tcp 2489368 ( 58.62%) 1157806190 ( 84.58%) 465.10
http(s) 805768 ( 18.97%) 736199253 ( 53.78%) 913.66
http(c) 314546 ( 7.41%) 27164209 ( 1.98%) 86.36
squid 2647 ( 0.06%) 2060581 ( 0.15%) 778.46
smtp 43745 ( 1.03%) 14293228 ( 1.04%) 326.74
nntp 184 ( 0.00%) 119893 ( 0.01%) 651.59
ftp 65099 ( 1.53%) 13037085 ( 0.95%) 200.27
pop3 1073 ( 0.03%) 326930 ( 0.02%) 304.69
telnet 1113 ( 0.03%) 204259 ( 0.01%) 183.52
ssh 1283 ( 0.03%) 329975 ( 0.02%) 257.19
dns 501 ( 0.01%) 40698 ( 0.00%) 81.23
bgp 163 ( 0.00%) 27485 ( 0.00%) 168.62
napster 28518 ( 0.67%) 2511620 ( 0.18%) 88.07
rtsp 4054 ( 0.10%) 2660935 ( 0.19%) 656.37
icecast 476 ( 0.01%) 134396 ( 0.01%) 282.34
other 1220157 ( 28.73%) 358693777 ( 26.20%) 293.97
udp 258409 ( 6.09%) 56516542 ( 4.13%) 218.71
dns 91333 ( 2.15%) 14269775 ( 1.04%) 156.24
realaud 1718 ( 0.04%) 1611488 ( 0.12%) 938.00
halflif 34730 ( 0.82%) 5728404 ( 0.42%) 164.94
everque 1 ( 0.00%) 78 ( 0.00%) 78.00
quake 2 ( 0.00%) 170 ( 0.00%) 85.00
other 128266 ( 3.02%) 34591712 ( 2.53%) 269.69
icmp 1484107 ( 34.95%) 151650001 ( 11.08%) 102.18
ip6 411 ( 0.01%) 75564 ( 0.01%) 183.85
other 9524 ( 0.22%) 2740081 ( 0.20%) 287.70
frag 4715 ( 0.11%) 3873680 ( 0.28%) 821.57
tcpdump file: 200309201400.dump.gz (112.67 MB)