Traffic Trace Info
DumpFile: 200302270715.dump
FileSize: 162.06MB
Id: 200302270715
StartTime: Thu Feb 27 07:15:00 2003
EndTime: Thu Feb 27 07:30:00 2003
TotalTime: 899.42 seconds
TotalCapSize: 125.91MB CapLen: 96 bytes
# of packets: 2369274 (1220.92MB)
AvgRate: 11.39Mbps stddev:1.46M
IP flow (unique src/dst pair) Information
# of flows: 295273 (avg. 8.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.9% 2.3% 2.3% 2.3% 1.7% 1.7% 1.6% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 229264
Top 10 bandwidth usage (bytes/total in %):
16.6% 9.9% 5.3% 5.1% 5.0% 5.0% 3.8% 2.9% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200302270715.pktlen.png)
detailed numbers
[ 16- 31]: 3628
[ 32- 63]: 629123
[ 64- 127]: 615100
[ 128- 255]: 134293
[ 256- 511]: 174858
[ 512- 1023]: 121846
[ 1024- 2047]: 690426
Protocol Breakdown
![[protocol breakdown chart]](200302270715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2369274 (100.00%) 1280226565 (100.00%) 540.35
ip 2363754 ( 99.77%) 1280058845 ( 99.99%) 541.54
tcp 1725151 ( 72.81%) 1143526956 ( 89.32%) 662.86
http(s) 252172 ( 10.64%) 268949498 ( 21.01%) 1066.53
http(c) 237103 ( 10.01%) 22221405 ( 1.74%) 93.72
squid 66499 ( 2.81%) 75963844 ( 5.93%) 1142.33
smtp 51845 ( 2.19%) 11855662 ( 0.93%) 228.68
nntp 16827 ( 0.71%) 14788789 ( 1.16%) 878.87
ftp 80351 ( 3.39%) 19524051 ( 1.53%) 242.98
pop3 1595 ( 0.07%) 236847 ( 0.02%) 148.49
imap 72 ( 0.00%) 24729 ( 0.00%) 343.46
telnet 2651 ( 0.11%) 168432 ( 0.01%) 63.54
ssh 216 ( 0.01%) 20619 ( 0.00%) 95.46
dns 3356 ( 0.14%) 1043100 ( 0.08%) 310.82
bgp 165 ( 0.01%) 36427 ( 0.00%) 220.77
napster 57916 ( 2.44%) 29794945 ( 2.33%) 514.45
realaud 14 ( 0.00%) 1086 ( 0.00%) 77.57
rtsp 9369 ( 0.40%) 5929318 ( 0.46%) 632.87
icecast 21922 ( 0.93%) 21314300 ( 1.66%) 972.28
hotline 8 ( 0.00%) 1052 ( 0.00%) 131.50
other 923002 ( 38.96%) 671650372 ( 52.46%) 727.68
udp 508653 ( 21.47%) 124799755 ( 9.75%) 245.35
dns 313966 ( 13.25%) 63426634 ( 4.95%) 202.02
realaud 1516 ( 0.06%) 507944 ( 0.04%) 335.06
halflif 4 ( 0.00%) 240 ( 0.00%) 60.00
everque 4 ( 0.00%) 348 ( 0.00%) 87.00
quake 1 ( 0.00%) 72 ( 0.00%) 72.00
cuseeme 1 ( 0.00%) 73 ( 0.00%) 73.00
other 193140 ( 8.15%) 60863182 ( 4.75%) 315.12
icmp 106780 ( 4.51%) 9523856 ( 0.74%) 89.19
ip6 17117 ( 0.72%) 1997550 ( 0.16%) 116.70
other 6053 ( 0.26%) 210728 ( 0.02%) 34.81
frag 28 ( 0.00%) 28033 ( 0.00%) 1001.18
tcpdump file: 200302270715.dump.gz (62.62 MB)