Traffic Trace Info
DumpFile: 200312241400.dump
FileSize: 344.28MB
Id: 200312241400
StartTime: Wed Dec 24 14:00:00 2003
EndTime: Wed Dec 24 14:15:00 2003
TotalTime: 899.77 seconds
TotalCapSize: 265.02MB CapLen: 96 bytes
# of packets: 5194228 (1990.73MB)
AvgRate: 18.56Mbps stddev:0.42M
IP flow (unique src/dst pair) Information
# of flows: 2000082 (avg. 2.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 6.5% 2.5% 2.3% 2.1% 1.9% 1.6% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 848047
Top 10 bandwidth usage (bytes/total in %):
7.6% 7.6% 7.0% 6.8% 5.5% 4.1% 3.7% 2.9% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200312241400.pktlen.png)
detailed numbers
[ 16- 31]: 10627
[ 32- 63]: 1299988
[ 64- 127]: 2403881
[ 128- 255]: 86034
[ 256- 511]: 130543
[ 512- 1023]: 209681
[ 1024- 2047]: 1053474
Protocol Breakdown
![[protocol breakdown chart]](200312241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5194228 (100.00%) 2087431936 (100.00%) 401.88
ip 5182480 ( 99.77%) 2087087588 ( 99.98%) 402.72
tcp 3280459 ( 63.16%) 1846486672 ( 88.46%) 562.87
http(s) 1121364 ( 21.59%) 1108793567 ( 53.12%) 988.79
http(c) 536302 ( 10.32%) 48032734 ( 2.30%) 89.56
squid 2166 ( 0.04%) 777564 ( 0.04%) 358.99
smtp 125599 ( 2.42%) 40646173 ( 1.95%) 323.62
nntp 105282 ( 2.03%) 158233632 ( 7.58%) 1502.95
ftp 161069 ( 3.10%) 11826054 ( 0.57%) 73.42
pop3 4346 ( 0.08%) 2032757 ( 0.10%) 467.73
imap 51 ( 0.00%) 3979 ( 0.00%) 78.02
telnet 774 ( 0.01%) 86517 ( 0.00%) 111.78
ssh 105 ( 0.00%) 14790 ( 0.00%) 140.86
dns 111 ( 0.00%) 7939 ( 0.00%) 71.52
bgp 158 ( 0.00%) 27492 ( 0.00%) 174.00
napster 940 ( 0.02%) 145175 ( 0.01%) 154.44
realaud 1812 ( 0.03%) 791142 ( 0.04%) 436.61
rtsp 16466 ( 0.32%) 7893685 ( 0.38%) 479.39
icecast 2950 ( 0.06%) 3540122 ( 0.17%) 1200.04
other 1200714 ( 23.12%) 463622514 ( 22.21%) 386.12
udp 216485 ( 4.17%) 61551015 ( 2.95%) 284.32
dns 87165 ( 1.68%) 11815796 ( 0.57%) 135.56
realaud 6659 ( 0.13%) 5337693 ( 0.26%) 801.58
halflif 5 ( 0.00%) 300 ( 0.00%) 60.00
other 122170 ( 2.35%) 44332113 ( 2.12%) 362.87
icmp 1599673 ( 30.80%) 166505122 ( 7.98%) 104.09
ip6 356 ( 0.01%) 70295 ( 0.00%) 197.46
other 85507 ( 1.65%) 12474484 ( 0.60%) 145.89
frag 1664 ( 0.03%) 1299137 ( 0.06%) 780.73
tcpdump file: 200312241400.dump.gz (138.10 MB)