Traffic Trace Info
DumpFile: 200312091400.dump
FileSize: 312.09MB
Id: 200312091400
StartTime: Tue Dec 9 14:00:00 2003
EndTime: Tue Dec 9 14:15:00 2003
TotalTime: 900.27 seconds
TotalCapSize: 240.07MB CapLen: 96 bytes
# of packets: 4719859 (1981.37MB)
AvgRate: 18.46Mbps stddev:0.50M
IP flow (unique src/dst pair) Information
# of flows: 1780705 (avg. 2.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 4.7% 3.4% 1.9% 1.8% 1.4% 1.2% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 867555
Top 10 bandwidth usage (bytes/total in %):
8.1% 6.3% 6.3% 5.3% 4.7% 3.4% 2.5% 2.2% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200312091400.pktlen.png)
detailed numbers
[ 16- 31]: 7844
[ 32- 63]: 1062607
[ 64- 127]: 2025269
[ 128- 255]: 134186
[ 256- 511]: 132297
[ 512- 1023]: 326820
[ 1024- 2047]: 1030836
Protocol Breakdown
![[protocol breakdown chart]](200312091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4719859 (100.00%) 2077615494 (100.00%) 440.19
ip 4711364 ( 99.82%) 2077367343 ( 99.99%) 440.93
tcp 2985921 ( 63.26%) 1848611365 ( 88.98%) 619.11
http(s) 1327445 ( 28.12%) 1164122074 ( 56.03%) 876.96
http(c) 241805 ( 5.12%) 25192286 ( 1.21%) 104.18
squid 6941 ( 0.15%) 8968743 ( 0.43%) 1292.14
smtp 88911 ( 1.88%) 24829064 ( 1.20%) 279.26
nntp 87663 ( 1.86%) 130980437 ( 6.30%) 1494.14
ftp 61430 ( 1.30%) 18349657 ( 0.88%) 298.71
pop3 1893 ( 0.04%) 515069 ( 0.02%) 272.09
imap 14 ( 0.00%) 1055 ( 0.00%) 75.36
telnet 1998 ( 0.04%) 271999 ( 0.01%) 136.14
ssh 636 ( 0.01%) 95160 ( 0.00%) 149.62
dns 154 ( 0.00%) 13621 ( 0.00%) 88.45
bgp 160 ( 0.00%) 33983 ( 0.00%) 212.39
napster 1275 ( 0.03%) 88449 ( 0.00%) 69.37
realaud 2034 ( 0.04%) 2517446 ( 0.12%) 1237.68
rtsp 8653 ( 0.18%) 7956047 ( 0.38%) 919.46
icecast 35782 ( 0.76%) 43354419 ( 2.09%) 1211.63
other 1119057 ( 23.71%) 421318852 ( 20.28%) 376.49
udp 243631 ( 5.16%) 73970037 ( 3.56%) 303.62
dns 96154 ( 2.04%) 13413257 ( 0.65%) 139.50
realaud 14340 ( 0.30%) 8805526 ( 0.42%) 614.05
halflif 1190 ( 0.03%) 142445 ( 0.01%) 119.70
quake 1 ( 0.00%) 82 ( 0.00%) 82.00
other 131655 ( 2.79%) 51215004 ( 2.47%) 389.01
icmp 1479566 ( 31.35%) 154566592 ( 7.44%) 104.47
ip6 559 ( 0.01%) 159216 ( 0.01%) 284.82
other 1687 ( 0.04%) 60133 ( 0.00%) 35.64
frag 1546 ( 0.03%) 1750268 ( 0.08%) 1132.13
tcpdump file: 200312091400.dump.gz (131.10 MB)