Traffic Trace Info
DumpFile: 200403081400.dump
FileSize: 321.12MB
Id: 200403081400
StartTime: Mon Mar 8 14:00:00 2004
EndTime: Mon Mar 8 14:15:00 2004
TotalTime: 899.40 seconds
TotalCapSize: 252.44MB CapLen: 96 bytes
# of packets: 4500801 (2288.93MB)
AvgRate: 21.35Mbps stddev:0.47M
IP flow (unique src/dst pair) Information
# of flows: 704498 (avg. 6.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 6.9% 1.9% 1.8% 1.8% 1.4% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 558003
Top 10 bandwidth usage (bytes/total in %):
7.4% 7.2% 7.2% 6.9% 6.9% 5.4% 4.1% 3.7% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200403081400.pktlen.png)
detailed numbers
[ 16- 31]: 12443
[ 32- 63]: 1581563
[ 64- 127]: 1041389
[ 128- 255]: 135992
[ 256- 511]: 159868
[ 512- 1023]: 233929
[ 1024- 2047]: 1335617
Protocol Breakdown
![[protocol breakdown chart]](200403081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4500801 (100.00%) 2400115196 (100.00%) 533.26
ip 4484282 ( 99.63%) 2399620220 ( 99.98%) 535.12
tcp 4134622 ( 91.86%) 2336395351 ( 97.35%) 565.08
http(s) 1139784 ( 25.32%) 1167873449 ( 48.66%) 1024.64
http(c) 992319 ( 22.05%) 210373580 ( 8.77%) 212.00
squid 32292 ( 0.72%) 7993081 ( 0.33%) 247.53
smtp 85475 ( 1.90%) 16816479 ( 0.70%) 196.74
nntp 110737 ( 2.46%) 166703827 ( 6.95%) 1505.40
ftp 132738 ( 2.95%) 42371857 ( 1.77%) 319.21
pop3 3452 ( 0.08%) 1867635 ( 0.08%) 541.03
imap 4 ( 0.00%) 289 ( 0.00%) 72.25
telnet 2699 ( 0.06%) 284129 ( 0.01%) 105.27
ssh 5031 ( 0.11%) 1049868 ( 0.04%) 208.68
dns 174 ( 0.00%) 14106 ( 0.00%) 81.07
bgp 160 ( 0.00%) 37211 ( 0.00%) 232.57
napster 60657 ( 1.35%) 49853719 ( 2.08%) 821.90
realaud 15 ( 0.00%) 4670 ( 0.00%) 311.33
rtsp 2288 ( 0.05%) 2993224 ( 0.12%) 1308.23
icecast 13765 ( 0.31%) 893471 ( 0.04%) 64.91
other 1552771 ( 34.50%) 667254513 ( 27.80%) 429.72
udp 247406 ( 5.50%) 54872534 ( 2.29%) 221.79
dns 89398 ( 1.99%) 11567177 ( 0.48%) 129.39
realaud 2 ( 0.00%) 656 ( 0.00%) 328.00
everque 6 ( 0.00%) 440 ( 0.00%) 73.33
quake 1 ( 0.00%) 66 ( 0.00%) 66.00
other 157889 ( 3.51%) 43270619 ( 1.80%) 274.06
icmp 89155 ( 1.98%) 7866058 ( 0.33%) 88.23
ip6 305 ( 0.01%) 50933 ( 0.00%) 166.99
other 12794 ( 0.28%) 435344 ( 0.02%) 34.03
frag 9041 ( 0.20%) 10572430 ( 0.44%) 1169.39
tcpdump file: 200403081400.dump.gz (124.26 MB)