Traffic Trace Info
DumpFile: 200401201400.dump
FileSize: 365.27MB
Id: 200401201400
StartTime: Tue Jan 20 14:00:00 2004
EndTime: Tue Jan 20 14:15:00 2004
TotalTime: 900.23 seconds
TotalCapSize: 286.01MB CapLen: 96 bytes
# of packets: 5194153 (2245.52MB)
AvgRate: 20.92Mbps stddev:0.55M
IP flow (unique src/dst pair) Information
# of flows: 614147 (avg. 8.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 2.7% 2.5% 2.4% 2.2% 1.4% 1.4% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 441252
Top 10 bandwidth usage (bytes/total in %):
6.8% 6.8% 4.9% 4.2% 4.0% 3.9% 2.9% 2.8% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200401201400.pktlen.png)
detailed numbers
[ 16- 31]: 14843
[ 32- 63]: 2213222
[ 64- 127]: 1086561
[ 128- 255]: 141276
[ 256- 511]: 213177
[ 512- 1023]: 269611
[ 1024- 2047]: 1255463
Protocol Breakdown
![[protocol breakdown chart]](200401201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5194153 (100.00%) 2354603396 (100.00%) 453.32
ip 5174827 ( 99.63%) 2354025577 ( 99.98%) 454.90
tcp 4778897 ( 92.01%) 2285716467 ( 97.07%) 478.29
http(s) 1325695 ( 25.52%) 1130999118 ( 48.03%) 853.14
http(c) 747192 ( 14.39%) 83142340 ( 3.53%) 111.27
squid 18996 ( 0.37%) 10247064 ( 0.44%) 539.43
smtp 90024 ( 1.73%) 19092355 ( 0.81%) 212.08
nntp 106090 ( 2.04%) 159479082 ( 6.77%) 1503.24
ftp 41129 ( 0.79%) 24230841 ( 1.03%) 589.14
pop3 7818 ( 0.15%) 570661 ( 0.02%) 72.99
imap 679 ( 0.01%) 357490 ( 0.02%) 526.49
telnet 1429 ( 0.03%) 160878 ( 0.01%) 112.58
ssh 295 ( 0.01%) 84157 ( 0.00%) 285.28
dns 72 ( 0.00%) 5062 ( 0.00%) 70.31
bgp 155 ( 0.00%) 34134 ( 0.00%) 220.22
napster 7491 ( 0.14%) 2430913 ( 0.10%) 324.51
realaud 4166 ( 0.08%) 4482547 ( 0.19%) 1075.98
rtsp 105274 ( 2.03%) 72275400 ( 3.07%) 686.55
icecast 8307 ( 0.16%) 509954 ( 0.02%) 61.39
hotline 4 ( 0.00%) 240 ( 0.00%) 60.00
other 2313728 ( 44.54%) 777599334 ( 33.02%) 336.08
udp 260077 ( 5.01%) 55014536 ( 2.34%) 211.53
dns 96606 ( 1.86%) 13021816 ( 0.55%) 134.79
realaud 11234 ( 0.22%) 6773070 ( 0.29%) 602.91
halflif 5 ( 0.00%) 300 ( 0.00%) 60.00
everque 1 ( 0.00%) 92 ( 0.00%) 92.00
other 152173 ( 2.93%) 35214693 ( 1.50%) 231.41
icmp 122086 ( 2.35%) 12766988 ( 0.54%) 104.57
ip6 344 ( 0.01%) 70541 ( 0.00%) 205.06
other 13423 ( 0.26%) 457045 ( 0.02%) 34.05
frag 1913 ( 0.04%) 1429523 ( 0.06%) 747.27
tcpdump file: 200401201400.dump.gz (147.87 MB)