Traffic Trace Info
DumpFile: 200310121400.dump
FileSize: 233.04MB
Id: 200310121400
StartTime: Sun Oct 12 14:00:00 2003
EndTime: Sun Oct 12 14:15:01 2003
TotalTime: 900.63 seconds
TotalCapSize: 179.71MB CapLen: 96 bytes
# of packets: 3494891 (1387.23MB)
AvgRate: 12.92Mbps stddev:1.25M
IP flow (unique src/dst pair) Information
# of flows: 1438753 (avg. 2.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
31.0% 8.7% 7.9% 4.7% 3.8% 1.5% 1.0% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 631286
Top 10 bandwidth usage (bytes/total in %):
31.0% 31.0% 16.6% 9.4% 9.4% 8.5% 4.7% 3.8% 2.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200310121400.pktlen.png)
detailed numbers
[ 16- 31]: 2167
[ 32- 63]: 973428
[ 64- 127]: 1526167
[ 128- 255]: 61138
[ 256- 511]: 77347
[ 512- 1023]: 89247
[ 1024- 2047]: 765397
Protocol Breakdown
![[protocol breakdown chart]](200310121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3494891 (100.00%) 1454614262 (100.00%) 416.21
ip 3492557 ( 99.93%) 1454546091 (100.00%) 416.47
tcp 2177032 ( 62.29%) 1297427303 ( 89.19%) 595.96
http(s) 485818 ( 13.90%) 509325663 ( 35.01%) 1048.39
http(c) 154971 ( 4.43%) 15968310 ( 1.10%) 103.04
squid 2945 ( 0.08%) 686574 ( 0.05%) 233.13
smtp 50532 ( 1.45%) 11466682 ( 0.79%) 226.92
nntp 299282 ( 8.56%) 451315114 ( 31.03%) 1507.99
ftp 50799 ( 1.45%) 12821670 ( 0.88%) 252.40
pop3 491 ( 0.01%) 262288 ( 0.02%) 534.19
imap 124 ( 0.00%) 54914 ( 0.00%) 442.85
telnet 228 ( 0.01%) 32358 ( 0.00%) 141.92
ssh 21 ( 0.00%) 2543 ( 0.00%) 121.10
dns 88 ( 0.00%) 7048 ( 0.00%) 80.09
bgp 162 ( 0.00%) 38909 ( 0.00%) 240.18
napster 39560 ( 1.13%) 2494947 ( 0.17%) 63.07
rtsp 1278 ( 0.04%) 1006713 ( 0.07%) 787.73
icecast 58146 ( 1.66%) 3550378 ( 0.24%) 61.06
other 1032567 ( 29.55%) 288392367 ( 19.83%) 279.30
udp 224441 ( 6.42%) 42761936 ( 2.94%) 190.53
dns 72011 ( 2.06%) 9154419 ( 0.63%) 127.13
realaud 186 ( 0.01%) 163203 ( 0.01%) 877.44
starcra 8262 ( 0.24%) 556231 ( 0.04%) 67.32
everque 2 ( 0.00%) 213 ( 0.00%) 106.50
cuseeme 1 ( 0.00%) 153 ( 0.00%) 153.00
other 143976 ( 4.12%) 32887608 ( 2.26%) 228.42
icmp 1088021 ( 31.13%) 113633963 ( 7.81%) 104.44
ip6 499 ( 0.01%) 138819 ( 0.01%) 278.19
other 2564 ( 0.07%) 584070 ( 0.04%) 227.80
frag 6 ( 0.00%) 1788 ( 0.00%) 298.00
tcpdump file: 200310121400.dump.gz (91.48 MB)