Traffic Trace Info
DumpFile: 200312151400.dump
FileSize: 314.27MB
Id: 200312151400
StartTime: Mon Dec 15 14:00:00 2003
EndTime: Mon Dec 15 14:15:00 2003
TotalTime: 900.64 seconds
TotalCapSize: 241.70MB CapLen: 96 bytes
# of packets: 4755683 (1964.01MB)
AvgRate: 18.29Mbps stddev:0.70M
IP flow (unique src/dst pair) Information
# of flows: 1688174 (avg. 2.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 2.8% 2.1% 1.9% 1.4% 1.2% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 716284
Top 10 bandwidth usage (bytes/total in %):
7.8% 7.8% 3.7% 3.3% 2.9% 2.8% 2.8% 2.2% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200312151400.pktlen.png)
detailed numbers
[ 16- 31]: 7317
[ 32- 63]: 1217409
[ 64- 127]: 1935219
[ 128- 255]: 160093
[ 256- 511]: 128150
[ 512- 1023]: 244731
[ 1024- 2047]: 1062764
Protocol Breakdown
![[protocol breakdown chart]](200312151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4755683 (100.00%) 2059414150 (100.00%) 433.04
ip 4747622 ( 99.83%) 2059177991 ( 99.99%) 433.73
tcp 3031606 ( 63.75%) 1859382466 ( 90.29%) 613.33
http(s) 1263536 ( 26.57%) 1141928388 ( 55.45%) 903.76
http(c) 224187 ( 4.71%) 23325812 ( 1.13%) 104.05
squid 1146 ( 0.02%) 439991 ( 0.02%) 383.94
smtp 98858 ( 2.08%) 21297288 ( 1.03%) 215.43
nntp 107478 ( 2.26%) 159765071 ( 7.76%) 1486.49
ftp 73901 ( 1.55%) 60494187 ( 2.94%) 818.58
pop3 3059 ( 0.06%) 1887360 ( 0.09%) 616.99
imap 35 ( 0.00%) 2822 ( 0.00%) 80.63
telnet 1327 ( 0.03%) 189937 ( 0.01%) 143.13
ssh 5387 ( 0.11%) 1441369 ( 0.07%) 267.56
dns 146 ( 0.00%) 14675 ( 0.00%) 100.51
bgp 161 ( 0.00%) 36882 ( 0.00%) 229.08
napster 10385 ( 0.22%) 880320 ( 0.04%) 84.77
rtsp 10588 ( 0.22%) 13482948 ( 0.65%) 1273.42
icecast 1495 ( 0.03%) 1116169 ( 0.05%) 746.60
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1229838 ( 25.86%) 433076042 ( 21.03%) 352.14
udp 213509 ( 4.49%) 40260427 ( 1.95%) 188.57
dns 82925 ( 1.74%) 11635743 ( 0.57%) 140.32
realaud 2583 ( 0.05%) 1804301 ( 0.09%) 698.53
everque 1 ( 0.00%) 87 ( 0.00%) 87.00
other 127991 ( 2.69%) 26819669 ( 1.30%) 209.54
icmp 1419787 ( 29.85%) 147118178 ( 7.14%) 103.62
ip6 375 ( 0.01%) 81531 ( 0.00%) 217.42
other 82345 ( 1.73%) 12335389 ( 0.60%) 149.80
frag 122 ( 0.00%) 89063 ( 0.00%) 730.02
tcpdump file: 200312151400.dump.gz (130.36 MB)