Traffic Trace Info
DumpFile: 200312161400.dump
FileSize: 352.67MB
Id: 200312161400
StartTime: Tue Dec 16 14:00:00 2003
EndTime: Tue Dec 16 14:15:01 2003
TotalTime: 900.46 seconds
TotalCapSize: 270.83MB CapLen: 96 bytes
# of packets: 5363363 (2023.32MB)
AvgRate: 18.85Mbps stddev:0.47M
IP flow (unique src/dst pair) Information
# of flows: 1844356 (avg. 2.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 1.7% 1.2% 1.2% 1.2% 0.9% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 840107
Top 10 bandwidth usage (bytes/total in %):
6.7% 6.7% 5.6% 3.0% 2.1% 2.1% 1.8% 1.8% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200312161400.pktlen.png)
detailed numbers
[ 16- 31]: 10839
[ 32- 63]: 1552278
[ 64- 127]: 2162561
[ 128- 255]: 148441
[ 256- 511]: 128193
[ 512- 1023]: 320639
[ 1024- 2047]: 1040412
Protocol Breakdown
![[protocol breakdown chart]](200312161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5363363 (100.00%) 2121605219 (100.00%) 395.57
ip 5351404 ( 99.78%) 2121254909 ( 99.98%) 396.39
tcp 3424612 ( 63.85%) 1882567401 ( 88.73%) 549.72
http(s) 1256984 ( 23.44%) 1091618862 ( 51.45%) 868.44
http(c) 380729 ( 7.10%) 34233302 ( 1.61%) 89.92
squid 16076 ( 0.30%) 14585841 ( 0.69%) 907.31
smtp 83752 ( 1.56%) 29068278 ( 1.37%) 347.08
nntp 93983 ( 1.75%) 141394847 ( 6.66%) 1504.47
ftp 93445 ( 1.74%) 29791189 ( 1.40%) 318.81
pop3 3542 ( 0.07%) 2712186 ( 0.13%) 765.72
imap 72 ( 0.00%) 5708 ( 0.00%) 79.28
telnet 1001 ( 0.02%) 114538 ( 0.01%) 114.42
ssh 51906 ( 0.97%) 11973665 ( 0.56%) 230.68
dns 86 ( 0.00%) 7319 ( 0.00%) 85.10
bgp 167 ( 0.00%) 42923 ( 0.00%) 257.02
napster 21226 ( 0.40%) 11276209 ( 0.53%) 531.25
realaud 20 ( 0.00%) 3456 ( 0.00%) 172.80
rtsp 53392 ( 1.00%) 35915594 ( 1.69%) 672.68
icecast 10311 ( 0.19%) 15063030 ( 0.71%) 1460.87
hotline 3 ( 0.00%) 609 ( 0.00%) 203.00
other 1357811 ( 25.32%) 464755844 ( 21.91%) 342.28
udp 256782 ( 4.79%) 59052631 ( 2.78%) 229.97
dns 115307 ( 2.15%) 16803809 ( 0.79%) 145.73
realaud 8075 ( 0.15%) 6210581 ( 0.29%) 769.11
halflif 1 ( 0.00%) 95 ( 0.00%) 95.00
everque 1 ( 0.00%) 82 ( 0.00%) 82.00
other 133394 ( 2.49%) 36037703 ( 1.70%) 270.16
icmp 1573321 ( 29.33%) 162768005 ( 7.67%) 103.46
ip6 480 ( 0.01%) 99555 ( 0.00%) 207.41
other 96209 ( 1.79%) 16767317 ( 0.79%) 174.28
frag 23 ( 0.00%) 11672 ( 0.00%) 507.48
tcpdump file: 200312161400.dump.gz (143.63 MB)