Traffic Trace Info
DumpFile: 200302271215.dump
FileSize: 318.15MB
Id: 200302271215
StartTime: Thu Feb 27 12:15:00 2003
EndTime: Thu Feb 27 12:30:00 2003
TotalTime: 899.73 seconds
TotalCapSize: 247.97MB CapLen: 96 bytes
# of packets: 4599732 (2291.94MB)
AvgRate: 21.37Mbps stddev:1.75M
IP flow (unique src/dst pair) Information
# of flows: 372661 (avg. 12.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.3% 8.8% 2.7% 1.3% 1.0% 0.8% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 268359
Top 10 bandwidth usage (bytes/total in %):
21.6% 12.6% 9.0% 6.8% 4.2% 3.8% 3.5% 3.3% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200302271215.pktlen.png)
detailed numbers
[ 16- 31]: 16271
[ 32- 63]: 1385932
[ 64- 127]: 1158271
[ 128- 255]: 221542
[ 256- 511]: 265861
[ 512- 1023]: 256016
[ 1024- 2047]: 1295839
Protocol Breakdown
![[protocol breakdown chart]](200302271215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4599732 (100.00%) 2403277026 (100.00%) 522.48
ip 4575853 ( 99.48%) 2402553789 ( 99.97%) 525.05
tcp 3741879 ( 81.35%) 2255614772 ( 93.86%) 602.80
http(s) 1393404 ( 30.29%) 1507106037 ( 62.71%) 1081.60
http(c) 1225558 ( 26.64%) 141242434 ( 5.88%) 115.25
squid 7894 ( 0.17%) 5885734 ( 0.24%) 745.60
smtp 107746 ( 2.34%) 40414850 ( 1.68%) 375.09
nntp 248 ( 0.01%) 108205 ( 0.00%) 436.31
ftp 42327 ( 0.92%) 15005181 ( 0.62%) 354.51
pop3 10228 ( 0.22%) 4282866 ( 0.18%) 418.74
imap 467 ( 0.01%) 82828 ( 0.00%) 177.36
telnet 2536 ( 0.06%) 288969 ( 0.01%) 113.95
ssh 1880 ( 0.04%) 258646 ( 0.01%) 137.58
dns 4806 ( 0.10%) 298256 ( 0.01%) 62.06
bgp 415 ( 0.01%) 229541 ( 0.01%) 553.11
napster 33508 ( 0.73%) 13495641 ( 0.56%) 402.76
realaud 39 ( 0.00%) 2869 ( 0.00%) 73.56
rtsp 13130 ( 0.29%) 8974260 ( 0.37%) 683.49
icecast 10373 ( 0.23%) 15116097 ( 0.63%) 1457.25
hotline 12 ( 0.00%) 1578 ( 0.00%) 131.50
other 887016 ( 19.28%) 502810102 ( 20.92%) 566.86
udp 621900 ( 13.52%) 130615979 ( 5.43%) 210.03
dns 385814 ( 8.39%) 64429682 ( 2.68%) 167.00
realaud 19804 ( 0.43%) 11634389 ( 0.48%) 587.48
halflif 4 ( 0.00%) 240 ( 0.00%) 60.00
quake 1 ( 0.00%) 81 ( 0.00%) 81.00
other 216239 ( 4.70%) 54550201 ( 2.27%) 252.27
icmp 168981 ( 3.67%) 13750417 ( 0.57%) 81.37
ip6 16734 ( 0.36%) 1676153 ( 0.07%) 100.16
other 26359 ( 0.57%) 896468 ( 0.04%) 34.01
frag 2 ( 0.00%) 120 ( 0.00%) 60.00
tcpdump file: 200302271215.dump.gz (125.20 MB)