Traffic Trace Info
DumpFile: 200311171400.dump
FileSize: 324.86MB
Id: 200311171400
StartTime: Mon Nov 17 14:00:00 2003
EndTime: Mon Nov 17 14:15:00 2003
TotalTime: 899.71 seconds
TotalCapSize: 249.32MB CapLen: 96 bytes
# of packets: 4950508 (1984.73MB)
AvgRate: 18.51Mbps stddev:0.63M
IP flow (unique src/dst pair) Information
# of flows: 2011558 (avg. 2.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 4.5% 1.2% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 887943
Top 10 bandwidth usage (bytes/total in %):
7.2% 7.2% 4.5% 4.5% 3.3% 2.7% 2.3% 2.3% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200311171400.pktlen.png)
detailed numbers
[ 16- 31]: 6891
[ 32- 63]: 1276217
[ 64- 127]: 2085380
[ 128- 255]: 117651
[ 256- 511]: 141936
[ 512- 1023]: 285438
[ 1024- 2047]: 1036995
Protocol Breakdown
![[protocol breakdown chart]](200311171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4950508 (100.00%) 2081144177 (100.00%) 420.39
ip 4942992 ( 99.85%) 2080924253 ( 99.99%) 420.98
tcp 3001884 ( 60.64%) 1857427354 ( 89.25%) 618.75
http(s) 1350880 ( 27.29%) 1191612681 ( 57.26%) 882.10
http(c) 226014 ( 4.57%) 23287801 ( 1.12%) 103.04
squid 11993 ( 0.24%) 7908762 ( 0.38%) 659.45
smtp 92073 ( 1.86%) 35324193 ( 1.70%) 383.65
nntp 100708 ( 2.03%) 150293309 ( 7.22%) 1492.37
ftp 96881 ( 1.96%) 48254886 ( 2.32%) 498.08
pop3 5045 ( 0.10%) 3222322 ( 0.15%) 638.72
imap 282 ( 0.01%) 25710 ( 0.00%) 91.17
telnet 1906 ( 0.04%) 228904 ( 0.01%) 120.10
ssh 3157 ( 0.06%) 2537149 ( 0.12%) 803.66
dns 167 ( 0.00%) 14059 ( 0.00%) 84.19
bgp 157 ( 0.00%) 36713 ( 0.00%) 233.84
napster 1473 ( 0.03%) 118785 ( 0.01%) 80.64
realaud 15 ( 0.00%) 900 ( 0.00%) 60.00
rtsp 30428 ( 0.61%) 14468978 ( 0.70%) 475.52
icecast 16176 ( 0.33%) 14377784 ( 0.69%) 888.83
other 1064252 ( 21.50%) 365699072 ( 17.57%) 343.62
udp 196615 ( 3.97%) 40025647 ( 1.92%) 203.57
dns 84472 ( 1.71%) 11562409 ( 0.56%) 136.88
realaud 11165 ( 0.23%) 5223518 ( 0.25%) 467.85
everque 2 ( 0.00%) 134 ( 0.00%) 67.00
other 99371 ( 2.01%) 23023174 ( 1.11%) 231.69
icmp 1674813 ( 33.83%) 171169682 ( 8.22%) 102.20
ip6 602 ( 0.01%) 157448 ( 0.01%) 261.54
other 69078 ( 1.40%) 12144122 ( 0.58%) 175.80
frag 3492 ( 0.07%) 2667770 ( 0.13%) 763.97
tcpdump file: 200311171400.dump.gz (137.79 MB)