Traffic Trace Info
DumpFile: 200401111400.dump
FileSize: 190.08MB
Id: 200401111400
StartTime: Sun Jan 11 14:00:01 2004
EndTime: Sun Jan 11 14:15:00 2004
TotalTime: 899.10 seconds
TotalCapSize: 147.96MB CapLen: 96 bytes
# of packets: 2759995 (1617.55MB)
AvgRate: 15.09Mbps stddev:1.71M
IP flow (unique src/dst pair) Information
# of flows: 414035 (avg. 6.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
22.1% 9.4% 3.5% 3.1% 2.8% 1.7% 1.6% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 283436
Top 10 bandwidth usage (bytes/total in %):
22.1% 22.1% 11.1% 9.4% 6.4% 4.4% 4.1% 3.6% 3.1% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200401111400.pktlen.png)
detailed numbers
[ 16- 31]: 2803
[ 32- 63]: 857663
[ 64- 127]: 631155
[ 128- 255]: 73346
[ 256- 511]: 102996
[ 512- 1023]: 110687
[ 1024- 2047]: 981345
Protocol Breakdown
![[protocol breakdown chart]](200401111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2759995 (100.00%) 1696128757 (100.00%) 614.54
ip 2756303 ( 99.87%) 1696018253 ( 99.99%) 615.32
tcp 2284721 ( 82.78%) 1619469751 ( 95.48%) 708.83
http(s) 619813 ( 22.46%) 634778947 ( 37.43%) 1024.15
http(c) 188596 ( 6.83%) 19485298 ( 1.15%) 103.32
squid 1838 ( 0.07%) 1719302 ( 0.10%) 935.42
smtp 67340 ( 2.44%) 16750353 ( 0.99%) 248.74
nntp 249606 ( 9.04%) 375487505 ( 22.14%) 1504.32
ftp 147632 ( 5.35%) 13325527 ( 0.79%) 90.26
pop3 1507 ( 0.05%) 132994 ( 0.01%) 88.25
imap 76 ( 0.00%) 6464 ( 0.00%) 85.05
telnet 144 ( 0.01%) 13226 ( 0.00%) 91.85
ssh 5 ( 0.00%) 554 ( 0.00%) 110.80
dns 83 ( 0.00%) 6410 ( 0.00%) 77.23
bgp 155 ( 0.01%) 22941 ( 0.00%) 148.01
napster 3869 ( 0.14%) 1441741 ( 0.09%) 372.64
rtsp 6381 ( 0.23%) 2806447 ( 0.17%) 439.81
icecast 218 ( 0.01%) 26339 ( 0.00%) 120.82
other 997385 ( 36.14%) 553462496 ( 32.63%) 554.91
udp 250609 ( 9.08%) 54358935 ( 3.20%) 216.91
dns 100960 ( 3.66%) 13668912 ( 0.81%) 135.39
realaud 4651 ( 0.17%) 2264422 ( 0.13%) 486.87
halflif 8 ( 0.00%) 615 ( 0.00%) 76.88
everque 5 ( 0.00%) 380 ( 0.00%) 76.00
other 144881 ( 5.25%) 38344827 ( 2.26%) 264.66
icmp 217836 ( 7.89%) 22022643 ( 1.30%) 101.10
ip6 385 ( 0.01%) 73321 ( 0.00%) 190.44
other 2752 ( 0.10%) 93603 ( 0.01%) 34.01
frag 10530 ( 0.38%) 12544054 ( 0.74%) 1191.27
tcpdump file: 200401111400.dump.gz (70.68 MB)