Traffic Trace Info
DumpFile: 200312051400.dump
FileSize: 335.61MB
Id: 200312051400
StartTime: Fri Dec 5 14:00:00 2003
EndTime: Fri Dec 5 14:15:00 2003
TotalTime: 900.41 seconds
TotalCapSize: 257.30MB CapLen: 96 bytes
# of packets: 5131963 (2060.35MB)
AvgRate: 19.20Mbps stddev:0.51M
IP flow (unique src/dst pair) Information
# of flows: 1930334 (avg. 2.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.8% 5.8% 2.3% 2.2% 1.9% 1.4% 1.3% 1.3% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 750532
Top 10 bandwidth usage (bytes/total in %):
8.8% 8.8% 5.9% 5.9% 2.9% 2.3% 2.3% 2.2% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200312051400.pktlen.png)
detailed numbers
[ 16- 31]: 9867
[ 32- 63]: 1098631
[ 64- 127]: 2329211
[ 128- 255]: 162914
[ 256- 511]: 127838
[ 512- 1023]: 319819
[ 1024- 2047]: 1083683
Protocol Breakdown
![[protocol breakdown chart]](200312051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5131963 (100.00%) 2160431005 (100.00%) 420.98
ip 5120815 ( 99.78%) 2160103340 ( 99.98%) 421.83
tcp 2951867 ( 57.52%) 1863223987 ( 86.24%) 631.20
http(s) 1209003 ( 23.56%) 1113159115 ( 51.52%) 920.72
http(c) 315697 ( 6.15%) 29846117 ( 1.38%) 94.54
squid 7331 ( 0.14%) 8464819 ( 0.39%) 1154.66
smtp 121187 ( 2.36%) 37583899 ( 1.74%) 310.13
nntp 126738 ( 2.47%) 191105960 ( 8.85%) 1507.88
ftp 36318 ( 0.71%) 24896444 ( 1.15%) 685.51
pop3 4577 ( 0.09%) 4257429 ( 0.20%) 930.18
imap 13 ( 0.00%) 990 ( 0.00%) 76.15
telnet 639 ( 0.01%) 76078 ( 0.00%) 119.06
ssh 57794 ( 1.13%) 3950874 ( 0.18%) 68.36
dns 165 ( 0.00%) 25330 ( 0.00%) 153.52
bgp 201 ( 0.00%) 77737 ( 0.00%) 386.75
napster 547 ( 0.01%) 58739 ( 0.00%) 107.38
realaud 40 ( 0.00%) 3855 ( 0.00%) 96.38
rtsp 18734 ( 0.37%) 27653604 ( 1.28%) 1476.12
icecast 211 ( 0.00%) 27827 ( 0.00%) 131.88
other 1052569 ( 20.51%) 422030720 ( 19.53%) 400.95
udp 434632 ( 8.47%) 115484985 ( 5.35%) 265.71
dns 181186 ( 3.53%) 20569694 ( 0.95%) 113.53
realaud 42414 ( 0.83%) 23121368 ( 1.07%) 545.14
halflif 48371 ( 0.94%) 8012381 ( 0.37%) 165.64
everque 1 ( 0.00%) 84 ( 0.00%) 84.00
quake 1 ( 0.00%) 71 ( 0.00%) 71.00
other 162624 ( 3.17%) 63779994 ( 2.95%) 392.19
icmp 1650795 ( 32.17%) 171957749 ( 7.96%) 104.17
ip6 393 ( 0.01%) 89561 ( 0.00%) 227.89
other 83128 ( 1.62%) 9347058 ( 0.43%) 112.44
frag 199 ( 0.00%) 138553 ( 0.01%) 696.25
tcpdump file: 200312051400.dump.gz (138.29 MB)