Traffic Trace Info
DumpFile: 200402011400.dump
FileSize: 225.00MB
Id: 200402011400
StartTime: Sun Feb 1 14:00:00 2004
EndTime: Sun Feb 1 14:15:00 2004
TotalTime: 899.89 seconds
TotalCapSize: 175.42MB CapLen: 96 bytes
# of packets: 3249620 (1784.06MB)
AvgRate: 16.63Mbps stddev:1.16M
IP flow (unique src/dst pair) Information
# of flows: 375760 (avg. 8.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.5% 12.2% 11.8% 2.6% 2.6% 1.8% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 298662
Top 10 bandwidth usage (bytes/total in %):
18.7% 18.5% 13.3% 12.2% 11.8% 11.8% 5.3% 4.6% 3.6% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200402011400.pktlen.png)
detailed numbers
[ 16- 31]: 3594
[ 32- 63]: 1007851
[ 64- 127]: 592253
[ 128- 255]: 78393
[ 256- 511]: 112070
[ 512- 1023]: 520336
[ 1024- 2047]: 935123
Protocol Breakdown
![[protocol breakdown chart]](200402011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3249620 (100.00%) 1870721608 (100.00%) 575.67
ip 3244933 ( 99.86%) 1870581444 ( 99.99%) 576.46
tcp 2954356 ( 90.91%) 1808217891 ( 96.66%) 612.05
http(s) 685348 ( 21.09%) 752662270 ( 40.23%) 1098.22
http(c) 269023 ( 8.28%) 25961898 ( 1.39%) 96.50
squid 36500 ( 1.12%) 20900468 ( 1.12%) 572.62
smtp 94193 ( 2.90%) 19297589 ( 1.03%) 204.87
nntp 147168 ( 4.53%) 221217243 ( 11.83%) 1503.16
ftp 48886 ( 1.50%) 57319719 ( 3.06%) 1172.52
pop3 764 ( 0.02%) 81604 ( 0.00%) 106.81
imap 42 ( 0.00%) 6957 ( 0.00%) 165.64
telnet 59 ( 0.00%) 8492 ( 0.00%) 143.93
ssh 518 ( 0.02%) 34356 ( 0.00%) 66.32
dns 120 ( 0.00%) 9224 ( 0.00%) 76.87
bgp 155 ( 0.00%) 22817 ( 0.00%) 147.21
napster 24393 ( 0.75%) 9333386 ( 0.50%) 382.63
realaud 4 ( 0.00%) 248 ( 0.00%) 62.00
rtsp 399908 ( 12.31%) 232159951 ( 12.41%) 580.53
icecast 100 ( 0.00%) 9195 ( 0.00%) 91.95
other 1247027 ( 38.37%) 469185723 ( 25.08%) 376.24
udp 193008 ( 5.94%) 51746037 ( 2.77%) 268.10
dns 75927 ( 2.34%) 9598596 ( 0.51%) 126.42
realaud 16162 ( 0.50%) 10333347 ( 0.55%) 639.36
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 100884 ( 3.10%) 31806704 ( 1.70%) 315.28
icmp 83566 ( 2.57%) 8991128 ( 0.48%) 107.59
ip6 311 ( 0.01%) 61114 ( 0.00%) 196.51
other 13692 ( 0.42%) 1565274 ( 0.08%) 114.32
frag 2882 ( 0.09%) 2453478 ( 0.13%) 851.31
tcpdump file: 200402011400.dump.gz (83.37 MB)