Traffic Trace Info
DumpFile: 200402081400.dump
FileSize: 221.88MB
Id: 200402081400
StartTime: Sun Feb 8 14:00:00 2004
EndTime: Sun Feb 8 14:15:00 2004
TotalTime: 899.78 seconds
TotalCapSize: 173.57MB CapLen: 96 bytes
# of packets: 3165926 (1711.57MB)
AvgRate: 15.96Mbps stddev:1.35M
IP flow (unique src/dst pair) Information
# of flows: 356804 (avg. 8.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
22.4% 9.8% 4.5% 2.6% 2.4% 2.3% 2.1% 1.7% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 292014
Top 10 bandwidth usage (bytes/total in %):
22.4% 22.4% 9.8% 9.8% 7.1% 4.5% 3.7% 3.2% 3.1% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200402081400.pktlen.png)
detailed numbers
[ 16- 31]: 3726
[ 32- 63]: 1155652
[ 64- 127]: 694834
[ 128- 255]: 52331
[ 256- 511]: 109289
[ 512- 1023]: 119644
[ 1024- 2047]: 1030450
Protocol Breakdown
![[protocol breakdown chart]](200402081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3165926 (100.00%) 1794713444 (100.00%) 566.88
ip 3161353 ( 99.86%) 1794577681 ( 99.99%) 567.66
tcp 2793183 ( 88.23%) 1699389369 ( 94.69%) 608.41
http(s) 744150 ( 23.50%) 857044282 ( 47.75%) 1151.71
http(c) 371367 ( 11.73%) 32291098 ( 1.80%) 86.95
squid 37813 ( 1.19%) 8746086 ( 0.49%) 231.30
smtp 84078 ( 2.66%) 14010126 ( 0.78%) 166.63
nntp 266513 ( 8.42%) 401332419 ( 22.36%) 1505.86
ftp 203400 ( 6.42%) 12894392 ( 0.72%) 63.39
pop3 4997 ( 0.16%) 1099113 ( 0.06%) 219.95
imap 213 ( 0.01%) 99034 ( 0.01%) 464.95
telnet 78 ( 0.00%) 7687 ( 0.00%) 98.55
ssh 562 ( 0.02%) 51826 ( 0.00%) 92.22
dns 102 ( 0.00%) 8506 ( 0.00%) 83.39
bgp 151 ( 0.00%) 23923 ( 0.00%) 158.43
napster 4279 ( 0.14%) 291686 ( 0.02%) 68.17
realaud 13 ( 0.00%) 780 ( 0.00%) 60.00
rtsp 1819 ( 0.06%) 1055640 ( 0.06%) 580.34
icecast 8738 ( 0.28%) 10253351 ( 0.57%) 1173.42
hotline 2 ( 0.00%) 122 ( 0.00%) 61.00
other 1064677 ( 33.63%) 360167257 ( 20.07%) 338.29
udp 205853 ( 6.50%) 73867574 ( 4.12%) 358.84
dns 71551 ( 2.26%) 9144160 ( 0.51%) 127.80
realaud 10071 ( 0.32%) 6617821 ( 0.37%) 657.12
everque 2 ( 0.00%) 509 ( 0.00%) 254.50
quake 1 ( 0.00%) 60 ( 0.00%) 60.00
other 120815 ( 3.82%) 55166890 ( 3.07%) 456.62
icmp 88274 ( 2.79%) 8901954 ( 0.50%) 100.84
ip6 509 ( 0.02%) 146158 ( 0.01%) 287.15
other 73534 ( 2.32%) 12272626 ( 0.68%) 166.90
frag 11585 ( 0.37%) 11860043 ( 0.66%) 1023.74
tcpdump file: 200402081400.dump.gz (79.41 MB)