Traffic Trace Info
DumpFile: 200401071400.dump
FileSize: 307.87MB
Id: 200401071400
StartTime: Wed Jan 7 14:00:00 2004
EndTime: Wed Jan 7 14:15:00 2004
TotalTime: 900.00 seconds
TotalCapSize: 239.52MB CapLen: 96 bytes
# of packets: 4479830 (1992.82MB)
AvgRate: 18.57Mbps stddev:1.01M
IP flow (unique src/dst pair) Information
# of flows: 529430 (avg. 8.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.8% 6.3% 2.5% 1.3% 1.3% 1.2% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 324442
Top 10 bandwidth usage (bytes/total in %):
9.8% 9.8% 6.3% 6.3% 4.6% 3.5% 2.9% 2.9% 2.9% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200401071400.pktlen.png)
detailed numbers
[ 16- 31]: 9275
[ 32- 63]: 1695054
[ 64- 127]: 1087059
[ 128- 255]: 138821
[ 256- 511]: 190559
[ 512- 1023]: 262192
[ 1024- 2047]: 1096870
Protocol Breakdown
![[protocol breakdown chart]](200401071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4479830 (100.00%) 2089619305 (100.00%) 466.45
ip 4468123 ( 99.74%) 2089270586 ( 99.98%) 467.59
tcp 3732862 ( 83.33%) 1958648090 ( 93.73%) 524.70
http(s) 1331315 ( 29.72%) 1214324880 ( 58.11%) 912.12
http(c) 677468 ( 15.12%) 69167570 ( 3.31%) 102.10
squid 8025 ( 0.18%) 740029 ( 0.04%) 92.22
smtp 106256 ( 2.37%) 31957854 ( 1.53%) 300.76
nntp 137548 ( 3.07%) 203970050 ( 9.76%) 1482.90
ftp 298666 ( 6.67%) 40011329 ( 1.91%) 133.97
pop3 4343 ( 0.10%) 928867 ( 0.04%) 213.88
imap 398 ( 0.01%) 239051 ( 0.01%) 600.63
telnet 2627 ( 0.06%) 209901 ( 0.01%) 79.90
ssh 2035 ( 0.05%) 154654 ( 0.01%) 76.00
dns 2382 ( 0.05%) 144009 ( 0.01%) 60.46
bgp 163 ( 0.00%) 28739 ( 0.00%) 176.31
napster 29908 ( 0.67%) 12521138 ( 0.60%) 418.66
realaud 3264 ( 0.07%) 2234927 ( 0.11%) 684.72
rtsp 21353 ( 0.48%) 9198982 ( 0.44%) 430.81
icecast 3758 ( 0.08%) 336562 ( 0.02%) 89.56
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1102989 ( 24.62%) 372462657 ( 17.82%) 337.68
udp 267882 ( 5.98%) 90535779 ( 4.33%) 337.97
dns 122122 ( 2.73%) 16438185 ( 0.79%) 134.60
realaud 1475 ( 0.03%) 647540 ( 0.03%) 439.01
halflif 1 ( 0.00%) 78 ( 0.00%) 78.00
other 141585 ( 3.16%) 71968836 ( 3.44%) 508.31
icmp 284190 ( 6.34%) 29233440 ( 1.40%) 102.87
ip6 333 ( 0.01%) 68038 ( 0.00%) 204.32
other 182856 ( 4.08%) 10785239 ( 0.52%) 58.98
frag 38824 ( 0.87%) 44828024 ( 2.15%) 1154.65
tcpdump file: 200401071400.dump.gz (115.50 MB)