Traffic Trace Info
DumpFile: 200311131400.dump
FileSize: 346.59MB
Id: 200311131400
StartTime: Thu Nov 13 14:00:01 2003
EndTime: Thu Nov 13 14:15:01 2003
TotalTime: 899.95 seconds
TotalCapSize: 263.91MB CapLen: 96 bytes
# of packets: 5418875 (1873.32MB)
AvgRate: 17.46Mbps stddev:0.86M
IP flow (unique src/dst pair) Information
# of flows: 2566075 (avg. 2.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.3% 3.7% 2.4% 1.8% 1.5% 1.2% 1.2% 1.1% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 826132
Top 10 bandwidth usage (bytes/total in %):
11.3% 11.3% 3.7% 3.7% 3.4% 2.4% 2.4% 1.9% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200311131400.pktlen.png)
detailed numbers
[ 16- 31]: 7278
[ 32- 63]: 1188046
[ 64- 127]: 2744133
[ 128- 255]: 136914
[ 256- 511]: 165038
[ 512- 1023]: 273262
[ 1024- 2047]: 904204
Protocol Breakdown
![[protocol breakdown chart]](200311131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5418875 (100.00%) 1964314737 (100.00%) 362.49
ip 5411099 ( 99.86%) 1964087803 ( 99.99%) 362.97
tcp 2728879 ( 50.36%) 1553756476 ( 79.10%) 569.38
http(s) 1014270 ( 18.72%) 877479633 ( 44.67%) 865.13
http(c) 352157 ( 6.50%) 35043754 ( 1.78%) 99.51
squid 3464 ( 0.06%) 2869082 ( 0.15%) 828.26
smtp 91965 ( 1.70%) 29138223 ( 1.48%) 316.84
nntp 147901 ( 2.73%) 222899604 ( 11.35%) 1507.09
ftp 80355 ( 1.48%) 80217280 ( 4.08%) 998.29
pop3 7617 ( 0.14%) 4553652 ( 0.23%) 597.83
imap 159 ( 0.00%) 10820 ( 0.00%) 68.05
telnet 1035 ( 0.02%) 140658 ( 0.01%) 135.90
ssh 2300 ( 0.04%) 263250 ( 0.01%) 114.46
dns 687 ( 0.01%) 48886 ( 0.00%) 71.16
bgp 160 ( 0.00%) 38200 ( 0.00%) 238.75
napster 5507 ( 0.10%) 362479 ( 0.02%) 65.82
realaud 109 ( 0.00%) 6542 ( 0.00%) 60.02
rtsp 140796 ( 2.60%) 28610704 ( 1.46%) 203.21
icecast 20849 ( 0.38%) 30412671 ( 1.55%) 1458.71
hotline 5 ( 0.00%) 731 ( 0.00%) 146.20
other 859485 ( 15.86%) 241657939 ( 12.30%) 281.17
udp 472566 ( 8.72%) 170741620 ( 8.69%) 361.31
dns 80251 ( 1.48%) 10887419 ( 0.55%) 135.67
realaud 16448 ( 0.30%) 9809161 ( 0.50%) 596.37
halflif 105223 ( 1.94%) 13922004 ( 0.71%) 132.31
starcra 2 ( 0.00%) 132 ( 0.00%) 66.00
everque 1 ( 0.00%) 70 ( 0.00%) 70.00
quake 1 ( 0.00%) 74 ( 0.00%) 74.00
other 267928 ( 4.94%) 132161472 ( 6.73%) 493.27
icmp 2173461 ( 40.11%) 228189002 ( 11.62%) 104.99
ip6 541 ( 0.01%) 121485 ( 0.01%) 224.56
other 35652 ( 0.66%) 11279220 ( 0.57%) 316.37
frag 26501 ( 0.49%) 33025971 ( 1.68%) 1246.22
tcpdump file: 200311131400.dump.gz (144.96 MB)