Traffic Trace Info
DumpFile: 200302271730.dump
FileSize: 330.29MB
Id: 200302271730
StartTime: Thu Feb 27 17:30:00 2003
EndTime: Thu Feb 27 17:45:00 2003
TotalTime: 900.54 seconds
TotalCapSize: 256.72MB CapLen: 96 bytes
# of packets: 4820864 (2340.34MB)
AvgRate: 21.80Mbps stddev:1.21M
IP flow (unique src/dst pair) Information
# of flows: 379078 (avg. 12.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.4% 2.8% 2.1% 1.4% 1.2% 1.1% 1.0% 1.0% 0.7%
IP address Information
# of IPv4 addresses: 267549
Top 10 bandwidth usage (bytes/total in %):
6.6% 4.9% 4.5% 4.5% 3.5% 3.5% 3.4% 3.0% 2.9% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200302271730.pktlen.png)
detailed numbers
[ 16- 31]: 18466
[ 32- 63]: 1326111
[ 64- 127]: 1171869
[ 128- 255]: 350712
[ 256- 511]: 310272
[ 512- 1023]: 394278
[ 1024- 2047]: 1249156
Protocol Breakdown
![[protocol breakdown chart]](200302271730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4820864 (100.00%) 2454025397 (100.00%) 509.04
ip 4793500 ( 99.43%) 2453196029 ( 99.97%) 511.78
tcp 3827375 ( 79.39%) 2276756685 ( 92.78%) 594.86
http(s) 1266118 ( 26.26%) 1243995230 ( 50.69%) 982.53
http(c) 930418 ( 19.30%) 122326706 ( 4.98%) 131.47
squid 30481 ( 0.63%) 27027500 ( 1.10%) 886.70
smtp 125196 ( 2.60%) 48022074 ( 1.96%) 383.58
nntp 248 ( 0.01%) 37998 ( 0.00%) 153.22
ftp 92886 ( 1.93%) 102357985 ( 4.17%) 1101.97
pop3 4723 ( 0.10%) 861931 ( 0.04%) 182.50
imap 1149 ( 0.02%) 136630 ( 0.01%) 118.91
telnet 1871 ( 0.04%) 186896 ( 0.01%) 99.89
ssh 30801 ( 0.64%) 25811610 ( 1.05%) 838.01
dns 4656 ( 0.10%) 290597 ( 0.01%) 62.41
bgp 181 ( 0.00%) 55899 ( 0.00%) 308.83
napster 202748 ( 4.21%) 119921963 ( 4.89%) 591.48
realaud 93 ( 0.00%) 6038 ( 0.00%) 64.92
rtsp 45583 ( 0.95%) 33636954 ( 1.37%) 737.93
icecast 29590 ( 0.61%) 27539679 ( 1.12%) 930.71
hotline 8 ( 0.00%) 909 ( 0.00%) 113.62
other 1060299 ( 21.99%) 524528161 ( 21.37%) 494.70
udp 766621 ( 15.90%) 161108918 ( 6.57%) 210.15
dns 482563 ( 10.01%) 81113363 ( 3.31%) 168.09
realaud 35828 ( 0.74%) 15987076 ( 0.65%) 446.22
halflif 95 ( 0.00%) 5700 ( 0.00%) 60.00
everque 2 ( 0.00%) 160 ( 0.00%) 80.00
quake 1 ( 0.00%) 87 ( 0.00%) 87.00
other 247562 ( 5.14%) 63585052 ( 2.59%) 256.84
icmp 168920 ( 3.50%) 14092925 ( 0.57%) 83.43
ip6 1552 ( 0.03%) 250177 ( 0.01%) 161.20
other 29032 ( 0.60%) 987324 ( 0.04%) 34.01
frag 1341 ( 0.03%) 1559825 ( 0.06%) 1163.18
tcpdump file: 200302271730.dump.gz (135.75 MB)