Traffic Trace Info
DumpFile: 200403051400.dump
FileSize: 279.23MB
Id: 200403051400
StartTime: Fri Mar 5 14:00:00 2004
EndTime: Fri Mar 5 14:15:00 2004
TotalTime: 899.59 seconds
TotalCapSize: 218.97MB CapLen: 96 bytes
# of packets: 3948843 (2029.66MB)
AvgRate: 18.93Mbps stddev:0.84M
IP flow (unique src/dst pair) Information
# of flows: 616610 (avg. 6.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.8% 2.9% 2.0% 1.9% 1.8% 1.7% 1.7% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 538346
Top 10 bandwidth usage (bytes/total in %):
12.8% 12.8% 8.0% 6.7% 3.9% 3.2% 3.2% 2.9% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200403051400.pktlen.png)
detailed numbers
[ 16- 31]: 7990
[ 32- 63]: 1520804
[ 64- 127]: 725301
[ 128- 255]: 96132
[ 256- 511]: 161141
[ 512- 1023]: 282180
[ 1024- 2047]: 1155295
Protocol Breakdown
![[protocol breakdown chart]](200403051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 3948843 (100.00%) 2128255015 (100.00%) 538.96
ip 3938912 ( 99.75%) 2127959748 ( 99.99%) 540.24
tcp 3582504 ( 90.72%) 2058157778 ( 96.71%) 574.50
http(s) 922885 ( 23.37%) 868308016 ( 40.80%) 940.86
http(c) 803118 ( 20.34%) 205093028 ( 9.64%) 255.37
squid 40067 ( 1.01%) 5257290 ( 0.25%) 131.21
smtp 128747 ( 3.26%) 28148159 ( 1.32%) 218.63
nntp 180123 ( 4.56%) 271405218 ( 12.75%) 1506.78
ftp 40772 ( 1.03%) 18358900 ( 0.86%) 450.28
pop3 2130 ( 0.05%) 324621 ( 0.02%) 152.40
imap 21 ( 0.00%) 1599 ( 0.00%) 76.14
telnet 314 ( 0.01%) 41279 ( 0.00%) 131.46
ssh 22 ( 0.00%) 4006 ( 0.00%) 182.09
dns 146 ( 0.00%) 11914 ( 0.00%) 81.60
bgp 162 ( 0.00%) 34126 ( 0.00%) 210.65
napster 244 ( 0.01%) 31736 ( 0.00%) 130.07
realaud 211 ( 0.01%) 20550 ( 0.00%) 97.39
rtsp 30060 ( 0.76%) 29943517 ( 1.41%) 996.12
icecast 137 ( 0.00%) 17572 ( 0.00%) 128.26
other 1433161 ( 36.29%) 631148183 ( 29.66%) 440.39
udp 261418 ( 6.62%) 61618913 ( 2.90%) 235.71
dns 97213 ( 2.46%) 12289621 ( 0.58%) 126.42
realaud 11889 ( 0.30%) 5487041 ( 0.26%) 461.52
halflif 5 ( 0.00%) 300 ( 0.00%) 60.00
everque 9 ( 0.00%) 625 ( 0.00%) 69.44
other 152292 ( 3.86%) 43840963 ( 2.06%) 287.87
icmp 88306 ( 2.24%) 7906313 ( 0.37%) 89.53
ip6 330 ( 0.01%) 56679 ( 0.00%) 171.75
other 6354 ( 0.16%) 220065 ( 0.01%) 34.63
frag 89 ( 0.00%) 26208 ( 0.00%) 294.47
tcpdump file: 200403051400.dump.gz (107.87 MB)