Traffic Trace Info
DumpFile: 200401251400.dump
FileSize: 309.37MB
Id: 200401251400
StartTime: Sun Jan 25 14:00:00 2004
EndTime: Sun Jan 25 14:15:00 2004
TotalTime: 899.91 seconds
TotalCapSize: 240.90MB CapLen: 96 bytes
# of packets: 4487512 (1811.96MB)
AvgRate: 16.89Mbps stddev:1.10M
IP flow (unique src/dst pair) Information
# of flows: 546519 (avg. 8.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.2% 8.4% 5.2% 4.3% 3.8% 2.6% 2.5% 2.1% 2.1% 1.6%
IP address Information
# of IPv4 addresses: 421295
Top 10 bandwidth usage (bytes/total in %):
18.2% 18.2% 8.7% 8.4% 6.2% 5.7% 5.2% 5.2% 5.1% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200401251400.pktlen.png)
detailed numbers
[ 16- 31]: 4431
[ 32- 63]: 2444894
[ 64- 127]: 583038
[ 128- 255]: 120694
[ 256- 511]: 115794
[ 512- 1023]: 193053
[ 1024- 2047]: 1025608
Protocol Breakdown
![[protocol breakdown chart]](200401251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4487512 (100.00%) 1899979347 (100.00%) 423.39
ip 4482262 ( 99.88%) 1899824139 ( 99.99%) 423.85
tcp 4065673 ( 90.60%) 1817437406 ( 95.66%) 447.02
http(s) 566271 ( 12.62%) 584372632 ( 30.76%) 1031.97
http(c) 211586 ( 4.71%) 21611187 ( 1.14%) 102.14
squid 3146 ( 0.07%) 3648703 ( 0.19%) 1159.79
smtp 58525 ( 1.30%) 9732337 ( 0.51%) 166.29
nntp 230053 ( 5.13%) 346186077 ( 18.22%) 1504.81
ftp 9257 ( 0.21%) 10585346 ( 0.56%) 1143.50
pop3 1101 ( 0.02%) 146987 ( 0.01%) 133.50
imap 636 ( 0.01%) 347527 ( 0.02%) 546.43
telnet 142 ( 0.00%) 10239 ( 0.00%) 72.11
ssh 64 ( 0.00%) 3840 ( 0.00%) 60.00
dns 106 ( 0.00%) 9987 ( 0.00%) 94.22
bgp 174 ( 0.00%) 44744 ( 0.00%) 257.15
napster 26248 ( 0.58%) 8529534 ( 0.45%) 324.96
rtsp 194603 ( 4.34%) 214735327 ( 11.30%) 1103.45
icecast 378 ( 0.01%) 27519 ( 0.00%) 72.80
hotline 9 ( 0.00%) 582 ( 0.00%) 64.67
other 2763257 ( 61.58%) 617439736 ( 32.50%) 223.45
udp 276494 ( 6.16%) 69171930 ( 3.64%) 250.18
dns 102054 ( 2.27%) 12702593 ( 0.67%) 124.47
realaud 7874 ( 0.18%) 5455927 ( 0.29%) 692.90
halflif 5 ( 0.00%) 2620 ( 0.00%) 524.00
other 166533 ( 3.71%) 51007548 ( 2.68%) 306.29
icmp 137346 ( 3.06%) 13065444 ( 0.69%) 95.13
ip6 333 ( 0.01%) 67168 ( 0.00%) 201.71
other 2416 ( 0.05%) 82191 ( 0.00%) 34.02
frag 8030 ( 0.18%) 6640262 ( 0.35%) 826.93
tcpdump file: 200401251400.dump.gz (128.57 MB)