Traffic Trace Info
DumpFile: 200311081400.dump
FileSize: 296.85MB
Id: 200311081400
StartTime: Sat Nov 8 14:00:00 2003
EndTime: Sat Nov 8 14:15:00 2003
TotalTime: 899.64 seconds
TotalCapSize: 226.09MB CapLen: 96 bytes
# of packets: 4636945 (1517.48MB)
AvgRate: 14.15Mbps stddev:1.89M
IP flow (unique src/dst pair) Information
# of flows: 2266989 (avg. 2.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.9% 2.7% 2.3% 2.2% 1.1% 1.0% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 708090
Top 10 bandwidth usage (bytes/total in %):
20.9% 20.9% 3.9% 3.7% 2.7% 2.7% 2.6% 2.5% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200311081400.pktlen.png)
detailed numbers
[ 16- 31]: 5305
[ 32- 63]: 988672
[ 64- 127]: 2535083
[ 128- 255]: 90569
[ 256- 511]: 110128
[ 512- 1023]: 165261
[ 1024- 2047]: 741927
Protocol Breakdown
![[protocol breakdown chart]](200311081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4636945 (100.00%) 1591189029 (100.00%) 343.15
ip 4631126 ( 99.87%) 1591018636 ( 99.99%) 343.55
tcp 2224443 ( 47.97%) 1273351074 ( 80.03%) 572.44
http(s) 656361 ( 14.16%) 632218636 ( 39.73%) 963.22
http(c) 375155 ( 8.09%) 33919483 ( 2.13%) 90.41
squid 784 ( 0.02%) 134742 ( 0.01%) 171.86
smtp 51655 ( 1.11%) 10965665 ( 0.69%) 212.29
nntp 220513 ( 4.76%) 332205935 ( 20.88%) 1506.51
ftp 84030 ( 1.81%) 29969837 ( 1.88%) 356.66
pop3 1638 ( 0.04%) 588758 ( 0.04%) 359.44
imap 258 ( 0.01%) 19580 ( 0.00%) 75.89
telnet 386 ( 0.01%) 48465 ( 0.00%) 125.56
ssh 72 ( 0.00%) 9924 ( 0.00%) 137.83
dns 106 ( 0.00%) 8429 ( 0.00%) 79.52
bgp 165 ( 0.00%) 28300 ( 0.00%) 171.52
napster 2748 ( 0.06%) 376793 ( 0.02%) 137.12
realaud 84 ( 0.00%) 5040 ( 0.00%) 60.00
rtsp 180103 ( 3.88%) 11158808 ( 0.70%) 61.96
icecast 446 ( 0.01%) 39932 ( 0.00%) 89.53
other 649886 ( 14.02%) 221650467 ( 13.93%) 341.06
udp 346598 ( 7.47%) 97451453 ( 6.12%) 281.17
dns 80569 ( 1.74%) 9575386 ( 0.60%) 118.85
realaud 477 ( 0.01%) 252694 ( 0.02%) 529.76
halflif 97047 ( 2.09%) 10787019 ( 0.68%) 111.15
other 165458 ( 3.57%) 72431525 ( 4.55%) 437.76
icmp 1981663 ( 42.74%) 207307083 ( 13.03%) 104.61
ip6 464 ( 0.01%) 102018 ( 0.01%) 219.87
other 77958 ( 1.68%) 12807008 ( 0.80%) 164.28
frag 27450 ( 0.59%) 35958243 ( 2.26%) 1309.95
tcpdump file: 200311081400.dump.gz (120.52 MB)