Traffic Trace Info
DumpFile: 200401301400.dump
FileSize: 279.66MB
Id: 200401301400
StartTime: Fri Jan 30 14:00:00 2004
EndTime: Fri Jan 30 14:15:00 2004
TotalTime: 900.23 seconds
TotalCapSize: 218.61MB CapLen: 96 bytes
# of packets: 4001226 (2082.12MB)
AvgRate: 19.40Mbps stddev:0.64M
IP flow (unique src/dst pair) Information
# of flows: 361399 (avg. 11.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 6.4% 1.8% 1.4% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 275499
Top 10 bandwidth usage (bytes/total in %):
8.6% 8.6% 6.4% 6.4% 5.0% 3.6% 3.0% 2.2% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200401301400.pktlen.png)
detailed numbers
[ 16- 31]: 7330
[ 32- 63]: 1184850
[ 64- 127]: 955190
[ 128- 255]: 132960
[ 256- 511]: 171989
[ 512- 1023]: 453250
[ 1024- 2047]: 1095657
Protocol Breakdown
![[protocol breakdown chart]](200401301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4001226 (100.00%) 2183258711 (100.00%) 545.65
ip 3992190 ( 99.77%) 2182990289 ( 99.99%) 546.82
tcp 3503308 ( 87.56%) 2060544705 ( 94.38%) 588.17
http(s) 1286301 ( 32.15%) 1081722492 ( 49.55%) 840.96
http(c) 579667 ( 14.49%) 61666423 ( 2.82%) 106.38
squid 1911 ( 0.05%) 1254309 ( 0.06%) 656.36
smtp 117908 ( 2.95%) 46533355 ( 2.13%) 394.66
nntp 125733 ( 3.14%) 188595537 ( 8.64%) 1499.97
ftp 50239 ( 1.26%) 48639253 ( 2.23%) 968.16
pop3 2731 ( 0.07%) 959420 ( 0.04%) 351.31
imap 2 ( 0.00%) 139 ( 0.00%) 69.50
telnet 3316 ( 0.08%) 565630 ( 0.03%) 170.58
ssh 789 ( 0.02%) 373561 ( 0.02%) 473.46
dns 1990 ( 0.05%) 163861 ( 0.01%) 82.34
bgp 158 ( 0.00%) 26473 ( 0.00%) 167.55
napster 29941 ( 0.75%) 15155830 ( 0.69%) 506.19
realaud 3981 ( 0.10%) 238860 ( 0.01%) 60.00
rtsp 17524 ( 0.44%) 11473876 ( 0.53%) 654.75
icecast 989 ( 0.02%) 61577 ( 0.00%) 62.26
hotline 6 ( 0.00%) 402 ( 0.00%) 67.00
other 1279893 ( 31.99%) 603103861 ( 27.62%) 471.21
udp 301157 ( 7.53%) 100728825 ( 4.61%) 334.47
dns 108463 ( 2.71%) 14013448 ( 0.64%) 129.20
realaud 58031 ( 1.45%) 46025847 ( 2.11%) 793.13
starcra 3782 ( 0.09%) 249763 ( 0.01%) 66.04
everque 1 ( 0.00%) 62 ( 0.00%) 62.00
other 129874 ( 3.25%) 39950731 ( 1.83%) 307.61
icmp 135346 ( 3.38%) 13080965 ( 0.60%) 96.65
ip6 341 ( 0.01%) 66886 ( 0.00%) 196.15
other 52038 ( 1.30%) 8568908 ( 0.39%) 164.67
frag 13795 ( 0.34%) 12972577 ( 0.59%) 940.38
tcpdump file: 200401301400.dump.gz (109.25 MB)