Traffic Trace Info
DumpFile: 200310251400.dump
FileSize: 304.53MB
Id: 200310251400
StartTime: Sat Oct 25 14:00:00 2003
EndTime: Sat Oct 25 14:15:00 2003
TotalTime: 900.63 seconds
TotalCapSize: 233.98MB CapLen: 96 bytes
# of packets: 4623857 (1839.72MB)
AvgRate: 17.14Mbps stddev:1.02M
IP flow (unique src/dst pair) Information
# of flows: 1912715 (avg. 2.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
22.6% 8.8% 3.1% 2.2% 1.8% 1.5% 1.3% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 783861
Top 10 bandwidth usage (bytes/total in %):
22.6% 22.6% 9.1% 8.8% 7.7% 4.8% 3.7% 3.7% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200310251400.pktlen.png)
detailed numbers
[ 16- 31]: 6666
[ 32- 63]: 1392640
[ 64- 127]: 1864430
[ 128- 255]: 65837
[ 256- 511]: 107289
[ 512- 1023]: 192145
[ 1024- 2047]: 994850
Protocol Breakdown
![[protocol breakdown chart]](200310251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4623857 (100.00%) 1929084954 (100.00%) 417.20
ip 4616106 ( 99.83%) 1928856197 ( 99.99%) 417.85
tcp 2926204 ( 63.28%) 1737616626 ( 90.07%) 593.81
http(s) 738662 ( 15.98%) 646621757 ( 33.52%) 875.40
http(c) 308821 ( 6.68%) 26758048 ( 1.39%) 86.65
squid 1149 ( 0.02%) 157943 ( 0.01%) 137.46
smtp 47045 ( 1.02%) 14141138 ( 0.73%) 300.59
nntp 289367 ( 6.26%) 436335761 ( 22.62%) 1507.90
ftp 58634 ( 1.27%) 22514483 ( 1.17%) 383.98
pop3 2330 ( 0.05%) 630014 ( 0.03%) 270.39
imap 63 ( 0.00%) 18721 ( 0.00%) 297.16
telnet 1085 ( 0.02%) 256689 ( 0.01%) 236.58
ssh 119 ( 0.00%) 9769 ( 0.00%) 82.09
dns 113 ( 0.00%) 11739 ( 0.00%) 103.88
bgp 159 ( 0.00%) 31318 ( 0.00%) 196.97
napster 56881 ( 1.23%) 25971962 ( 1.35%) 456.60
realaud 41 ( 0.00%) 2949 ( 0.00%) 71.93
rtsp 11078 ( 0.24%) 10066043 ( 0.52%) 908.65
icecast 243 ( 0.01%) 122619 ( 0.01%) 504.60
hotline 4 ( 0.00%) 671 ( 0.00%) 167.75
other 1410003 ( 30.49%) 553942307 ( 28.72%) 392.87
udp 161942 ( 3.50%) 31333552 ( 1.62%) 193.49
dns 67943 ( 1.47%) 8645481 ( 0.45%) 127.25
halflif 1 ( 0.00%) 70 ( 0.00%) 70.00
quake 1 ( 0.00%) 70 ( 0.00%) 70.00
other 93990 ( 2.03%) 22687675 ( 1.18%) 241.38
icmp 1516055 ( 32.79%) 157984719 ( 8.19%) 104.21
ip6 371 ( 0.01%) 71595 ( 0.00%) 192.98
other 11534 ( 0.25%) 1849705 ( 0.10%) 160.37
frag 335 ( 0.01%) 22976 ( 0.00%) 68.59
tcpdump file: 200310251400.dump.gz (120.55 MB)