Traffic Trace Info
DumpFile: 200310281400.dump
FileSize: 327.11MB
Id: 200310281400
StartTime: Tue Oct 28 14:00:00 2003
EndTime: Tue Oct 28 14:15:01 2003
TotalTime: 900.92 seconds
TotalCapSize: 251.98MB CapLen: 96 bytes
# of packets: 4923833 (1856.79MB)
AvgRate: 17.29Mbps stddev:1.04M
IP flow (unique src/dst pair) Information
# of flows: 1827912 (avg. 2.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.8% 2.1% 1.9% 1.7% 1.5% 1.3% 1.1% 1.1% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 766840
Top 10 bandwidth usage (bytes/total in %):
16.8% 16.8% 4.8% 4.1% 3.7% 2.2% 2.1% 2.1% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200310281400.pktlen.png)
detailed numbers
[ 16- 31]: 7942
[ 32- 63]: 1298119
[ 64- 127]: 2126500
[ 128- 255]: 117852
[ 256- 511]: 136632
[ 512- 1023]: 278453
[ 1024- 2047]: 958335
Protocol Breakdown
![[protocol breakdown chart]](200310281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4923833 (100.00%) 1946984255 (100.00%) 395.42
ip 4914961 ( 99.82%) 1946723860 ( 99.99%) 396.08
tcp 3035752 ( 61.65%) 1717885141 ( 88.23%) 565.88
http(s) 1110000 ( 22.54%) 931887665 ( 47.86%) 839.54
http(c) 353432 ( 7.18%) 31113317 ( 1.60%) 88.03
squid 4970 ( 0.10%) 994145 ( 0.05%) 200.03
smtp 103865 ( 2.11%) 31584674 ( 1.62%) 304.09
nntp 217320 ( 4.41%) 327440022 ( 16.82%) 1506.72
ftp 63774 ( 1.30%) 46638644 ( 2.40%) 731.31
pop3 3970 ( 0.08%) 1311963 ( 0.07%) 330.47
imap 45 ( 0.00%) 3598 ( 0.00%) 79.96
telnet 1929 ( 0.04%) 269834 ( 0.01%) 139.88
ssh 1195 ( 0.02%) 111782 ( 0.01%) 93.54
dns 170 ( 0.00%) 13711 ( 0.00%) 80.65
bgp 169 ( 0.00%) 41787 ( 0.00%) 247.26
napster 8764 ( 0.18%) 4310763 ( 0.22%) 491.87
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 11989 ( 0.24%) 13950557 ( 0.72%) 1163.61
icecast 8633 ( 0.18%) 689655 ( 0.04%) 79.89
hotline 7 ( 0.00%) 428 ( 0.00%) 61.14
other 1145316 ( 23.26%) 327511863 ( 16.82%) 285.96
udp 388301 ( 7.89%) 70500784 ( 3.62%) 181.56
dns 95925 ( 1.95%) 13512131 ( 0.69%) 140.86
realaud 4304 ( 0.09%) 2949455 ( 0.15%) 685.28
halflif 14 ( 0.00%) 840 ( 0.00%) 60.00
everque 4 ( 0.00%) 272 ( 0.00%) 68.00
quake 18 ( 0.00%) 1080 ( 0.00%) 60.00
other 287930 ( 5.85%) 54009826 ( 2.77%) 187.58
icmp 1461362 ( 29.68%) 151317412 ( 7.77%) 103.55
ip6 437 ( 0.01%) 79380 ( 0.00%) 181.65
other 29109 ( 0.59%) 6941143 ( 0.36%) 238.45
frag 6098 ( 0.12%) 8217360 ( 0.42%) 1347.55
tcpdump file: 200310281400.dump.gz (132.46 MB)