Traffic Trace Info
DumpFile: 200311261400.dump
FileSize: 300.69MB
Id: 200311261400
StartTime: Wed Nov 26 14:00:00 2003
EndTime: Wed Nov 26 14:15:00 2003
TotalTime: 900.08 seconds
TotalCapSize: 230.91MB CapLen: 96 bytes
# of packets: 4573042 (1994.06MB)
AvgRate: 18.58Mbps stddev:0.63M
IP flow (unique src/dst pair) Information
# of flows: 1702179 (avg. 2.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.2% 5.0% 2.3% 2.1% 2.0% 1.6% 1.4% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 718398
Top 10 bandwidth usage (bytes/total in %):
10.2% 10.2% 5.2% 5.0% 3.4% 3.2% 2.7% 2.4% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200311261400.pktlen.png)
detailed numbers
[ 16- 31]: 7395
[ 32- 63]: 981265
[ 64- 127]: 1946301
[ 128- 255]: 109716
[ 256- 511]: 118318
[ 512- 1023]: 367662
[ 1024- 2047]: 1042385
Protocol Breakdown
![[protocol breakdown chart]](200311261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4573042 (100.00%) 2090926000 (100.00%) 457.23
ip 4564494 ( 99.81%) 2090673930 ( 99.99%) 458.03
tcp 2875212 ( 62.87%) 1876896205 ( 89.76%) 652.79
http(s) 1046770 ( 22.89%) 954023290 ( 45.63%) 911.40
http(c) 295780 ( 6.47%) 29363784 ( 1.40%) 99.28
squid 7873 ( 0.17%) 2976287 ( 0.14%) 378.04
smtp 112774 ( 2.47%) 24357584 ( 1.16%) 215.99
nntp 168387 ( 3.68%) 253556804 ( 12.13%) 1505.80
ftp 61541 ( 1.35%) 44244923 ( 2.12%) 718.95
pop3 2937 ( 0.06%) 1239831 ( 0.06%) 422.14
imap 95 ( 0.00%) 33878 ( 0.00%) 356.61
telnet 430 ( 0.01%) 39391 ( 0.00%) 91.61
ssh 242 ( 0.01%) 33249 ( 0.00%) 137.39
dns 168 ( 0.00%) 18757 ( 0.00%) 111.65
bgp 155 ( 0.00%) 26306 ( 0.00%) 169.72
napster 7682 ( 0.17%) 1675127 ( 0.08%) 218.06
realaud 28 ( 0.00%) 2241 ( 0.00%) 80.04
rtsp 15065 ( 0.33%) 1665325 ( 0.08%) 110.54
icecast 467 ( 0.01%) 482121 ( 0.02%) 1032.38
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1154688 ( 25.25%) 563150807 ( 26.93%) 487.71
udp 217581 ( 4.76%) 61925489 ( 2.96%) 284.61
dns 98408 ( 2.15%) 13450605 ( 0.64%) 136.68
realaud 9737 ( 0.21%) 4223171 ( 0.20%) 433.72
halflif 4187 ( 0.09%) 747797 ( 0.04%) 178.60
everque 1 ( 0.00%) 84 ( 0.00%) 84.00
other 102056 ( 2.23%) 39363069 ( 1.88%) 385.70
icmp 1467706 ( 32.09%) 151636017 ( 7.25%) 103.31
ip6 410 ( 0.01%) 92731 ( 0.00%) 226.17
other 3585 ( 0.08%) 123488 ( 0.01%) 34.45
frag 14711 ( 0.32%) 19123426 ( 0.91%) 1299.94
tcpdump file: 200311261400.dump.gz (124.37 MB)