Traffic Trace Info
DumpFile: 200402121400.dump
FileSize: 293.93MB
Id: 200402121400
StartTime: Thu Feb 12 14:00:01 2004
EndTime: Thu Feb 12 14:15:00 2004
TotalTime: 899.21 seconds
TotalCapSize: 230.01MB CapLen: 96 bytes
# of packets: 4188906 (2096.59MB)
AvgRate: 19.56Mbps stddev:0.29M
IP flow (unique src/dst pair) Information
# of flows: 563444 (avg. 7.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
21.9% 7.2% 3.9% 3.5% 0.9% 0.6% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 441494
Top 10 bandwidth usage (bytes/total in %):
22.4% 21.9% 7.2% 7.2% 3.9% 3.9% 3.7% 3.7% 3.5% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200402121400.pktlen.png)
detailed numbers
[ 16- 31]: 8156
[ 32- 63]: 1640565
[ 64- 127]: 733290
[ 128- 255]: 104777
[ 256- 511]: 189216
[ 512- 1023]: 351535
[ 1024- 2047]: 1161367
Protocol Breakdown
![[protocol breakdown chart]](200402121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4188906 (100.00%) 2198434406 (100.00%) 524.82
ip 4179216 ( 99.77%) 2198147862 ( 99.99%) 525.97
tcp 3832319 ( 91.49%) 2127517193 ( 96.77%) 555.15
http(s) 1485019 ( 35.45%) 1471236233 ( 66.92%) 990.72
http(c) 513272 ( 12.25%) 57949301 ( 2.64%) 112.90
squid 59129 ( 1.41%) 21423324 ( 0.97%) 362.32
smtp 106922 ( 2.55%) 26164760 ( 1.19%) 244.71
nntp 56984 ( 1.36%) 85452830 ( 3.89%) 1499.59
ftp 29818 ( 0.71%) 8958745 ( 0.41%) 300.45
pop3 2839 ( 0.07%) 1251155 ( 0.06%) 440.70
imap 75 ( 0.00%) 6202 ( 0.00%) 82.69
telnet 813 ( 0.02%) 102573 ( 0.00%) 126.17
ssh 192 ( 0.00%) 27811 ( 0.00%) 144.85
dns 95 ( 0.00%) 8223 ( 0.00%) 86.56
bgp 165 ( 0.00%) 41912 ( 0.00%) 254.01
napster 5620 ( 0.13%) 3893232 ( 0.18%) 692.75
realaud 6617 ( 0.16%) 414444 ( 0.02%) 62.63
rtsp 8303 ( 0.20%) 10203311 ( 0.46%) 1228.87
icecast 7211 ( 0.17%) 639932 ( 0.03%) 88.74
other 1548961 ( 36.98%) 439729752 ( 20.00%) 283.89
udp 255251 ( 6.09%) 61743295 ( 2.81%) 241.89
dns 102410 ( 2.44%) 13086551 ( 0.60%) 127.79
realaud 13711 ( 0.33%) 6696418 ( 0.30%) 488.40
quake 1 ( 0.00%) 84 ( 0.00%) 84.00
other 138841 ( 3.31%) 41936523 ( 1.91%) 302.05
icmp 86809 ( 2.07%) 8680991 ( 0.39%) 100.00
ip6 310 ( 0.01%) 52127 ( 0.00%) 168.15
other 4527 ( 0.11%) 154256 ( 0.01%) 34.07
frag 5263 ( 0.13%) 3927972 ( 0.18%) 746.34
tcpdump file: 200402121400.dump.gz (118.76 MB)