Traffic Trace Info
DumpFile: 200312081400.dump
FileSize: 324.29MB
Id: 200312081400
StartTime: Mon Dec 8 14:00:00 2003
EndTime: Mon Dec 8 14:15:00 2003
TotalTime: 899.89 seconds
TotalCapSize: 248.90MB CapLen: 96 bytes
# of packets: 4940478 (2008.25MB)
AvgRate: 18.72Mbps stddev:0.69M
IP flow (unique src/dst pair) Information
# of flows: 1823127 (avg. 2.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 6.1% 2.9% 2.0% 1.8% 1.2% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 733133
Top 10 bandwidth usage (bytes/total in %):
7.2% 7.2% 6.1% 6.1% 3.6% 2.9% 2.9% 2.8% 2.3% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200312081400.pktlen.png)
detailed numbers
[ 16- 31]: 8246
[ 32- 63]: 1202301
[ 64- 127]: 2090409
[ 128- 255]: 121893
[ 256- 511]: 137394
[ 512- 1023]: 353892
[ 1024- 2047]: 1026343
Protocol Breakdown
![[protocol breakdown chart]](200312081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4940478 (100.00%) 2105800307 (100.00%) 426.23
ip 4931340 ( 99.82%) 2105532377 ( 99.99%) 426.97
tcp 3111760 ( 62.98%) 1897222136 ( 90.10%) 609.69
http(s) 1427392 ( 28.89%) 1241839156 ( 58.97%) 870.01
http(c) 344965 ( 6.98%) 47470143 ( 2.25%) 137.61
squid 1651 ( 0.03%) 1113752 ( 0.05%) 674.59
smtp 86385 ( 1.75%) 22918003 ( 1.09%) 265.30
nntp 101941 ( 2.06%) 152619965 ( 7.25%) 1497.14
ftp 81719 ( 1.65%) 45801237 ( 2.18%) 560.47
pop3 6188 ( 0.13%) 5184553 ( 0.25%) 837.84
imap 56 ( 0.00%) 12898 ( 0.00%) 230.32
telnet 1802 ( 0.04%) 171476 ( 0.01%) 95.16
ssh 6446 ( 0.13%) 7835349 ( 0.37%) 1215.54
dns 115 ( 0.00%) 8131 ( 0.00%) 70.70
bgp 166 ( 0.00%) 43131 ( 0.00%) 259.83
napster 7461 ( 0.15%) 6661221 ( 0.32%) 892.81
realaud 2203 ( 0.04%) 1131278 ( 0.05%) 513.52
rtsp 8941 ( 0.18%) 10604267 ( 0.50%) 1186.03
icecast 172 ( 0.00%) 65059 ( 0.00%) 378.25
other 1034049 ( 20.93%) 353737731 ( 16.80%) 342.09
udp 282080 ( 5.71%) 47487439 ( 2.26%) 168.35
dns 101501 ( 2.05%) 13527439 ( 0.64%) 133.27
realaud 4798 ( 0.10%) 3133261 ( 0.15%) 653.03
quake 1 ( 0.00%) 84 ( 0.00%) 84.00
other 175754 ( 3.56%) 30825712 ( 1.46%) 175.39
icmp 1526880 ( 30.91%) 159367430 ( 7.57%) 104.37
ip6 375 ( 0.01%) 77330 ( 0.00%) 206.21
other 10245 ( 0.21%) 1378042 ( 0.07%) 134.51
frag 79 ( 0.00%) 53908 ( 0.00%) 682.38
tcpdump file: 200312081400.dump.gz (135.80 MB)