Traffic Trace Info
DumpFile: 200311041400.dump
FileSize: 325.29MB
Id: 200311041400
StartTime: Tue Nov 4 14:00:01 2003
EndTime: Tue Nov 4 14:15:00 2003
TotalTime: 899.30 seconds
TotalCapSize: 249.24MB CapLen: 96 bytes
# of packets: 4983608 (2018.54MB)
AvgRate: 18.83Mbps stddev:0.70M
IP flow (unique src/dst pair) Information
# of flows: 1972720 (avg. 2.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.9% 2.8% 1.8% 1.7% 1.4% 1.2% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 835495
Top 10 bandwidth usage (bytes/total in %):
9.9% 9.9% 8.6% 6.3% 2.9% 2.9% 2.8% 2.5% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200311041400.pktlen.png)
detailed numbers
[ 16- 31]: 8345
[ 32- 63]: 1156771
[ 64- 127]: 2211377
[ 128- 255]: 118002
[ 256- 511]: 155095
[ 512- 1023]: 281073
[ 1024- 2047]: 1052945
Protocol Breakdown
![[protocol breakdown chart]](200311041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4983608 (100.00%) 2116592575 (100.00%) 424.71
ip 4974206 ( 99.81%) 2116316370 ( 99.99%) 425.46
tcp 2985248 ( 59.90%) 1874425213 ( 88.56%) 627.90
http(s) 1175754 ( 23.59%) 1019730964 ( 48.18%) 867.30
http(c) 243990 ( 4.90%) 31599457 ( 1.49%) 129.51
squid 9271 ( 0.19%) 5757457 ( 0.27%) 621.02
smtp 79527 ( 1.60%) 29238842 ( 1.38%) 367.66
nntp 138629 ( 2.78%) 208698081 ( 9.86%) 1505.44
ftp 41597 ( 0.83%) 28547445 ( 1.35%) 686.29
pop3 13726 ( 0.28%) 14395924 ( 0.68%) 1048.81
imap 155 ( 0.00%) 24953 ( 0.00%) 160.99
telnet 1747 ( 0.04%) 218523 ( 0.01%) 125.08
ssh 838 ( 0.02%) 80313 ( 0.00%) 95.84
dns 316 ( 0.01%) 23766 ( 0.00%) 75.21
bgp 163 ( 0.00%) 35924 ( 0.00%) 220.39
napster 5982 ( 0.12%) 581660 ( 0.03%) 97.24
realaud 30 ( 0.00%) 2284 ( 0.00%) 76.13
rtsp 362 ( 0.01%) 183284 ( 0.01%) 506.31
icecast 518 ( 0.01%) 230580 ( 0.01%) 445.14
other 1272564 ( 25.53%) 535072354 ( 25.28%) 420.47
udp 295083 ( 5.92%) 62130863 ( 2.94%) 210.55
dns 86275 ( 1.73%) 11629926 ( 0.55%) 134.80
realaud 8456 ( 0.17%) 4021502 ( 0.19%) 475.58
everque 3 ( 0.00%) 248 ( 0.00%) 82.67
quake 2 ( 0.00%) 140 ( 0.00%) 70.00
other 197954 ( 3.97%) 46139483 ( 2.18%) 233.08
icmp 1628543 ( 32.68%) 169154619 ( 7.99%) 103.87
ip6 1953 ( 0.04%) 1438455 ( 0.07%) 736.54
other 63379 ( 1.27%) 9167220 ( 0.43%) 144.64
frag 12576 ( 0.25%) 13662487 ( 0.65%) 1086.39
tcpdump file: 200311041400.dump.gz (135.01 MB)