Traffic Trace Info
DumpFile: 200401131400.dump
FileSize: 395.65MB
Id: 200401131400
StartTime: Tue Jan 13 14:00:00 2004
EndTime: Tue Jan 13 14:15:01 2004
TotalTime: 900.28 seconds
TotalCapSize: 308.36MB CapLen: 96 bytes
# of packets: 5720526 (2152.25MB)
AvgRate: 20.05Mbps stddev:0.44M
IP flow (unique src/dst pair) Information
# of flows: 593255 (avg. 9.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.3% 3.6% 2.8% 2.0% 1.2% 1.2% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 413534
Top 10 bandwidth usage (bytes/total in %):
17.3% 17.3% 4.2% 3.6% 3.6% 3.2% 3.0% 2.9% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200401131400.pktlen.png)
detailed numbers
[ 16- 31]: 13521
[ 32- 63]: 2072282
[ 64- 127]: 1232001
[ 128- 255]: 769162
[ 256- 511]: 197722
[ 512- 1023]: 373610
[ 1024- 2047]: 1062228
Protocol Breakdown
![[protocol breakdown chart]](200401131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5720526 (100.00%) 2256801616 (100.00%) 394.51
ip 5704128 ( 99.71%) 2256315223 ( 99.98%) 395.56
tcp 4310776 ( 75.36%) 2040042853 ( 90.40%) 473.24
http(s) 1629521 ( 28.49%) 1459339411 ( 64.66%) 895.56
http(c) 537420 ( 9.39%) 61156585 ( 2.71%) 113.80
squid 14965 ( 0.26%) 1481661 ( 0.07%) 99.01
smtp 117010 ( 2.05%) 43200216 ( 1.91%) 369.20
nntp 54046 ( 0.94%) 80756406 ( 3.58%) 1494.22
ftp 16060 ( 0.28%) 3473441 ( 0.15%) 216.28
pop3 4437 ( 0.08%) 1901539 ( 0.08%) 428.56
imap 474 ( 0.01%) 254536 ( 0.01%) 537.00
telnet 1434 ( 0.03%) 174830 ( 0.01%) 121.92
ssh 378 ( 0.01%) 28232 ( 0.00%) 74.69
dns 56 ( 0.00%) 3482 ( 0.00%) 62.18
bgp 160 ( 0.00%) 25525 ( 0.00%) 159.53
napster 19582 ( 0.34%) 12079649 ( 0.54%) 616.88
realaud 7922 ( 0.14%) 476348 ( 0.02%) 60.13
rtsp 11024 ( 0.19%) 5957813 ( 0.26%) 540.44
icecast 539 ( 0.01%) 44228 ( 0.00%) 82.06
hotline 23 ( 0.00%) 1420 ( 0.00%) 61.74
other 1895432 ( 33.13%) 369674944 ( 16.38%) 195.03
udp 1099607 ( 19.22%) 189693825 ( 8.41%) 172.51
dns 976345 ( 17.07%) 149296105 ( 6.62%) 152.91
realaud 7506 ( 0.13%) 5787232 ( 0.26%) 771.01
everque 1 ( 0.00%) 72 ( 0.00%) 72.00
other 115693 ( 2.02%) 34584874 ( 1.53%) 298.94
icmp 284082 ( 4.97%) 26027656 ( 1.15%) 91.62
ip6 339 ( 0.01%) 70755 ( 0.00%) 208.72
other 9324 ( 0.16%) 480134 ( 0.02%) 51.49
frag 2737 ( 0.05%) 3789052 ( 0.17%) 1384.38
tcpdump file: 200401131400.dump.gz (158.77 MB)