Traffic Trace Info
DumpFile: 200312111400.dump
FileSize: 367.22MB
Id: 200312111400
StartTime: Thu Dec 11 14:00:01 2003
EndTime: Thu Dec 11 14:15:00 2003
TotalTime: 899.73 seconds
TotalCapSize: 282.67MB CapLen: 96 bytes
# of packets: 5540935 (2444.65MB)
AvgRate: 22.79Mbps stddev:0.66M
IP flow (unique src/dst pair) Information
# of flows: 1866035 (avg. 2.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 4.0% 3.9% 3.5% 2.8% 2.6% 2.0% 1.8% 1.4% 1.0%
IP address Information
# of IPv4 addresses: 863380
Top 10 bandwidth usage (bytes/total in %):
17.7% 4.2% 4.2% 4.1% 4.0% 3.6% 2.9% 2.8% 2.8% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200312111400.pktlen.png)
detailed numbers
[ 16- 31]: 15348
[ 32- 63]: 1383530
[ 64- 127]: 2156494
[ 128- 255]: 136979
[ 256- 511]: 157795
[ 512- 1023]: 374342
[ 1024- 2047]: 1316447
Protocol Breakdown
![[protocol breakdown chart]](200312111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5540935 (100.00%) 2563400533 (100.00%) 462.63
ip 5522286 ( 99.66%) 2562847387 ( 99.98%) 464.09
tcp 3669388 ( 66.22%) 2335126905 ( 91.09%) 636.38
http(s) 1657610 ( 29.92%) 1598671807 ( 62.37%) 964.44
http(c) 462651 ( 8.35%) 38782432 ( 1.51%) 83.83
squid 14246 ( 0.26%) 16168632 ( 0.63%) 1134.96
smtp 123676 ( 2.23%) 33138731 ( 1.29%) 267.95
nntp 71939 ( 1.30%) 106494556 ( 4.15%) 1480.35
ftp 51588 ( 0.93%) 11933985 ( 0.47%) 231.33
pop3 1654 ( 0.03%) 313426 ( 0.01%) 189.50
imap 37 ( 0.00%) 2621 ( 0.00%) 70.84
telnet 1295 ( 0.02%) 124077 ( 0.00%) 95.81
ssh 15404 ( 0.28%) 8701081 ( 0.34%) 564.86
dns 162 ( 0.00%) 13350 ( 0.00%) 82.41
bgp 161 ( 0.00%) 33911 ( 0.00%) 210.63
napster 59782 ( 1.08%) 6236545 ( 0.24%) 104.32
realaud 981 ( 0.02%) 874653 ( 0.03%) 891.59
rtsp 62359 ( 1.13%) 81966582 ( 3.20%) 1314.43
icecast 252 ( 0.00%) 44969 ( 0.00%) 178.45
other 1145407 ( 20.67%) 431617116 ( 16.84%) 376.82
udp 253467 ( 4.57%) 60459754 ( 2.36%) 238.53
dns 95684 ( 1.73%) 13480341 ( 0.53%) 140.88
realaud 23834 ( 0.43%) 16912716 ( 0.66%) 709.60
halflif 863 ( 0.02%) 74737 ( 0.00%) 86.60
starcra 24903 ( 0.45%) 1766753 ( 0.07%) 70.95
everque 1 ( 0.00%) 85 ( 0.00%) 85.00
other 108090 ( 1.95%) 28212897 ( 1.10%) 261.01
icmp 1536388 ( 27.73%) 160177692 ( 6.25%) 104.26
ip6 724 ( 0.01%) 169308 ( 0.01%) 233.85
other 62319 ( 1.12%) 6913728 ( 0.27%) 110.94
frag 5001 ( 0.09%) 4037621 ( 0.16%) 807.36
tcpdump file: 200312111400.dump.gz (152.02 MB)