Traffic Trace Info
DumpFile: 200312251400.dump
FileSize: 347.05MB
Id: 200312251400
StartTime: Thu Dec 25 14:00:01 2003
EndTime: Thu Dec 25 14:15:00 2003
TotalTime: 899.37 seconds
TotalCapSize: 266.97MB CapLen: 96 bytes
# of packets: 5247940 (2062.04MB)
AvgRate: 19.23Mbps stddev:1.18M
IP flow (unique src/dst pair) Information
# of flows: 1842076 (avg. 2.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.2% 2.2% 2.2% 2.2% 2.2% 2.2% 1.5% 1.2% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 740412
Top 10 bandwidth usage (bytes/total in %):
17.3% 17.3% 15.2% 3.1% 2.9% 2.8% 2.7% 2.3% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200312251400.pktlen.png)
detailed numbers
[ 16- 31]: 13659
[ 32- 63]: 1386295
[ 64- 127]: 2273623
[ 128- 255]: 93613
[ 256- 511]: 147922
[ 512- 1023]: 240527
[ 1024- 2047]: 1092301
Protocol Breakdown
![[protocol breakdown chart]](200312251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5247940 (100.00%) 2162204734 (100.00%) 412.01
ip 5230697 ( 99.67%) 2161690966 ( 99.98%) 413.27
tcp 3368089 ( 64.18%) 1936671769 ( 89.57%) 575.01
http(s) 824313 ( 15.71%) 744667361 ( 34.44%) 903.38
http(c) 522472 ( 9.96%) 56307995 ( 2.60%) 107.77
squid 1689 ( 0.03%) 554503 ( 0.03%) 328.30
smtp 114304 ( 2.18%) 21576019 ( 1.00%) 188.76
nntp 247613 ( 4.72%) 372924323 ( 17.25%) 1506.08
ftp 15843 ( 0.30%) 4079807 ( 0.19%) 257.51
pop3 1811 ( 0.03%) 441207 ( 0.02%) 243.63
imap 42 ( 0.00%) 3330 ( 0.00%) 79.29
telnet 527 ( 0.01%) 67490 ( 0.00%) 128.06
ssh 2199 ( 0.04%) 1252869 ( 0.06%) 569.74
dns 69 ( 0.00%) 5995 ( 0.00%) 86.88
bgp 163 ( 0.00%) 31642 ( 0.00%) 194.12
napster 14396 ( 0.27%) 1893427 ( 0.09%) 131.52
realaud 358 ( 0.01%) 27129 ( 0.00%) 75.78
rtsp 16632 ( 0.32%) 11371092 ( 0.53%) 683.69
icecast 17752 ( 0.34%) 21187572 ( 0.98%) 1193.53
other 1587610 ( 30.25%) 700267761 ( 32.39%) 441.08
udp 258540 ( 4.93%) 54427888 ( 2.52%) 210.52
dns 82916 ( 1.58%) 11024921 ( 0.51%) 132.96
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 16747 ( 0.32%) 10344724 ( 0.48%) 617.71
halflif 1 ( 0.00%) 85 ( 0.00%) 85.00
everque 1 ( 0.00%) 86 ( 0.00%) 86.00
quake 1 ( 0.00%) 87 ( 0.00%) 87.00
cuseeme 1 ( 0.00%) 85 ( 0.00%) 85.00
other 158864 ( 3.03%) 33057543 ( 1.53%) 208.09
icmp 1508185 ( 28.74%) 157581643 ( 7.29%) 104.48
ip6 343 ( 0.01%) 72914 ( 0.00%) 212.58
other 95540 ( 1.82%) 12936752 ( 0.60%) 135.41
frag 60 ( 0.00%) 3600 ( 0.00%) 60.00
tcpdump file: 200312251400.dump.gz (139.37 MB)