Traffic Trace Info
DumpFile: 200401011400.dump
FileSize: 403.39MB
Id: 200401011400
StartTime: Thu Jan 1 14:00:00 2004
EndTime: Thu Jan 1 14:15:01 2004
TotalTime: 900.65 seconds
TotalCapSize: 312.30MB CapLen: 96 bytes
# of packets: 5969726 (1625.30MB)
AvgRate: 15.14Mbps stddev:1.14M
IP flow (unique src/dst pair) Information
# of flows: 1208226 (avg. 4.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
23.6% 7.6% 6.1% 3.1% 2.9% 2.4% 2.0% 1.8% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 431678
Top 10 bandwidth usage (bytes/total in %):
23.6% 23.6% 21.8% 7.6% 6.5% 6.2% 6.1% 3.3% 3.2% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200401011400.pktlen.png)
detailed numbers
[ 16- 31]: 3743
[ 32- 63]: 2390532
[ 64- 127]: 1742471
[ 128- 255]: 877323
[ 256- 511]: 74223
[ 512- 1023]: 92928
[ 1024- 2047]: 788506
Protocol Breakdown
![[protocol breakdown chart]](200401011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5969726 (100.00%) 1704249665 (100.00%) 285.48
ip 5965548 ( 99.93%) 1704127063 ( 99.99%) 285.66
tcp 3907405 ( 65.45%) 1413191705 ( 82.92%) 361.67
http(s) 483994 ( 8.11%) 566110294 ( 33.22%) 1169.66
http(c) 150753 ( 2.53%) 15692194 ( 0.92%) 104.09
squid 13805 ( 0.23%) 5454602 ( 0.32%) 395.12
smtp 62223 ( 1.04%) 11415189 ( 0.67%) 183.46
nntp 266499 ( 4.46%) 401721176 ( 23.57%) 1507.40
ftp 608829 ( 10.20%) 49200908 ( 2.89%) 80.81
pop3 380 ( 0.01%) 34009 ( 0.00%) 89.50
telnet 124 ( 0.00%) 10466 ( 0.00%) 84.40
ssh 225 ( 0.00%) 51846 ( 0.00%) 230.43
dns 99 ( 0.00%) 7153 ( 0.00%) 72.25
bgp 176 ( 0.00%) 48390 ( 0.00%) 274.94
napster 89 ( 0.00%) 7936 ( 0.00%) 89.17
realaud 2694 ( 0.05%) 229222 ( 0.01%) 85.09
rtsp 10446 ( 0.17%) 15532025 ( 0.91%) 1486.89
icecast 136 ( 0.00%) 11045 ( 0.00%) 81.21
other 2306865 ( 38.64%) 347662356 ( 20.40%) 150.71
udp 1065384 ( 17.85%) 188210398 ( 11.04%) 176.66
dns 935409 ( 15.67%) 118946618 ( 6.98%) 127.16
realaud 13 ( 0.00%) 8532 ( 0.00%) 656.31
starcra 1 ( 0.00%) 84 ( 0.00%) 84.00
other 129072 ( 2.16%) 68822246 ( 4.04%) 533.21
icmp 991217 ( 16.60%) 102614104 ( 6.02%) 103.52
ip6 329 ( 0.01%) 68759 ( 0.00%) 208.99
other 1213 ( 0.02%) 42097 ( 0.00%) 34.70
frag 36029 ( 0.60%) 41049697 ( 2.41%) 1139.35
tcpdump file: 200401011400.dump.gz (148.08 MB)