Traffic Trace Info
DumpFile: 200312131400.dump
FileSize: 279.08MB
Id: 200312131400
StartTime: Sat Dec 13 14:00:01 2003
EndTime: Sat Dec 13 14:15:00 2003
TotalTime: 899.80 seconds
TotalCapSize: 214.27MB CapLen: 96 bytes
# of packets: 4247467 (1675.67MB)
AvgRate: 15.62Mbps stddev:1.33M
IP flow (unique src/dst pair) Information
# of flows: 1635477 (avg. 2.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
26.1% 3.7% 3.1% 2.7% 2.3% 1.8% 1.7% 1.6% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 700840
Top 10 bandwidth usage (bytes/total in %):
26.1% 26.1% 4.9% 3.7% 3.3% 3.1% 3.1% 2.7% 2.5% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200312131400.pktlen.png)
detailed numbers
[ 16- 31]: 7037
[ 32- 63]: 994474
[ 64- 127]: 1948982
[ 128- 255]: 120242
[ 256- 511]: 72996
[ 512- 1023]: 193185
[ 1024- 2047]: 910551
Protocol Breakdown
![[protocol breakdown chart]](200312131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4247467 (100.00%) 1757063853 (100.00%) 413.67
ip 4239237 ( 99.81%) 1756820841 ( 99.99%) 414.42
tcp 2479765 ( 58.38%) 1558328606 ( 88.69%) 628.42
http(s) 700368 ( 16.49%) 621588659 ( 35.38%) 887.52
http(c) 282370 ( 6.65%) 28275738 ( 1.61%) 100.14
squid 6782 ( 0.16%) 8287290 ( 0.47%) 1221.95
smtp 83950 ( 1.98%) 10826560 ( 0.62%) 128.96
nntp 304063 ( 7.16%) 458837697 ( 26.11%) 1509.02
ftp 8305 ( 0.20%) 5135203 ( 0.29%) 618.33
pop3 436 ( 0.01%) 98152 ( 0.01%) 225.12
imap 16 ( 0.00%) 1255 ( 0.00%) 78.44
telnet 74 ( 0.00%) 5050 ( 0.00%) 68.24
ssh 161 ( 0.00%) 11224 ( 0.00%) 69.71
dns 84 ( 0.00%) 6633 ( 0.00%) 78.96
bgp 158 ( 0.00%) 28816 ( 0.00%) 182.38
napster 1593 ( 0.04%) 167121 ( 0.01%) 104.91
realaud 41 ( 0.00%) 2730 ( 0.00%) 66.59
rtsp 4979 ( 0.12%) 6676382 ( 0.38%) 1340.91
icecast 505 ( 0.01%) 359729 ( 0.02%) 712.33
other 1085803 ( 25.56%) 418017349 ( 23.79%) 384.98
udp 238203 ( 5.61%) 37948128 ( 2.16%) 159.31
dns 58624 ( 1.38%) 7784520 ( 0.44%) 132.79
realaud 6401 ( 0.15%) 3347921 ( 0.19%) 523.03
halflif 950 ( 0.02%) 59913 ( 0.00%) 63.07
everque 1 ( 0.00%) 87 ( 0.00%) 87.00
quake 1 ( 0.00%) 85 ( 0.00%) 85.00
other 172197 ( 4.05%) 26754546 ( 1.52%) 155.37
icmp 1438939 ( 33.88%) 148632140 ( 8.46%) 103.29
ip6 602 ( 0.01%) 142663 ( 0.01%) 236.98
other 81728 ( 1.92%) 11769304 ( 0.67%) 144.01
frag 8 ( 0.00%) 480 ( 0.00%) 60.00
tcpdump file: 200312131400.dump.gz (110.99 MB)