Traffic Trace Info
DumpFile: 200403251400.dump
FileSize: 522.88MB
Id: 200403251400
StartTime: Thu Mar 25 14:00:00 2004
EndTime: Thu Mar 25 14:15:01 2004
TotalTime: 900.69 seconds
TotalCapSize: 410.32MB CapLen: 96 bytes
# of packets: 7376826 (2847.59MB)
AvgRate: 26.52Mbps stddev:0.51M
IP flow (unique src/dst pair) Information
# of flows: 878835 (avg. 8.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.5% 1.4% 1.3% 1.3% 1.3% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 707748
Top 10 bandwidth usage (bytes/total in %):
39.3% 5.0% 3.3% 2.2% 2.1% 1.9% 1.9% 1.9% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200403251400.pktlen.png)
detailed numbers
[ 16- 31]: 43162
[ 32- 63]: 3184156
[ 64- 127]: 1830824
[ 128- 255]: 172731
[ 256- 511]: 217443
[ 512- 1023]: 387062
[ 1024- 2047]: 1541448
Protocol Breakdown
![[protocol breakdown chart]](200403251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7376826 (100.00%) 2985912747 (100.00%) 404.77
ip 7312587 ( 99.13%) 2983965957 ( 99.93%) 408.06
tcp 6496697 ( 88.07%) 2829816407 ( 94.77%) 435.58
http(s) 1752186 ( 23.75%) 889341775 ( 29.78%) 507.56
http(c) 2851867 ( 38.66%) 1369529140 ( 45.87%) 480.22
squid 24138 ( 0.33%) 2078526 ( 0.07%) 86.11
smtp 260089 ( 3.53%) 80407488 ( 2.69%) 309.15
nntp 35573 ( 0.48%) 28718085 ( 0.96%) 807.30
ftp 40451 ( 0.55%) 22522483 ( 0.75%) 556.78
pop3 3541 ( 0.05%) 901867 ( 0.03%) 254.69
imap 523 ( 0.01%) 41270 ( 0.00%) 78.91
telnet 1591 ( 0.02%) 173553 ( 0.01%) 109.08
ssh 12191 ( 0.17%) 831007 ( 0.03%) 68.17
dns 1284 ( 0.02%) 83096 ( 0.00%) 64.72
bgp 158 ( 0.00%) 30960 ( 0.00%) 195.95
napster 4718 ( 0.06%) 1547495 ( 0.05%) 328.00
realaud 4291 ( 0.06%) 277461 ( 0.01%) 64.66
rtsp 13289 ( 0.18%) 6211803 ( 0.21%) 467.44
icecast 12286 ( 0.17%) 5944932 ( 0.20%) 483.88
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 1476418 ( 20.01%) 421066708 ( 14.10%) 285.19
udp 529769 ( 7.18%) 134536064 ( 4.51%) 253.95
dns 253659 ( 3.44%) 32986888 ( 1.10%) 130.04
realaud 1039 ( 0.01%) 89218 ( 0.00%) 85.87
everque 1 ( 0.00%) 60 ( 0.00%) 60.00
quake 1 ( 0.00%) 1053 ( 0.00%) 1053.00
other 271563 ( 3.68%) 99697342 ( 3.34%) 367.12
icmp 215016 ( 2.91%) 16913581 ( 0.57%) 78.66
ip6 1151 ( 0.02%) 320016 ( 0.01%) 278.03
other 69954 ( 0.95%) 2379889 ( 0.08%) 34.02
frag 11539 ( 0.16%) 10357813 ( 0.35%) 897.64
tcpdump file: 200403251400.dump.gz (218.56 MB)