Traffic Trace Info
DumpFile: 200403261400.dump
FileSize: 542.13MB
Id: 200403261400
StartTime: Fri Mar 26 14:00:01 2004
EndTime: Fri Mar 26 14:15:00 2004
TotalTime: 899.18 seconds
TotalCapSize: 426.05MB CapLen: 96 bytes
# of packets: 7607216 (2851.15MB)
AvgRate: 26.60Mbps stddev:0.59M
IP flow (unique src/dst pair) Information
# of flows: 946270 (avg. 8.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.5% 1.5% 1.3% 1.3% 1.3% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 738711
Top 10 bandwidth usage (bytes/total in %):
34.9% 4.4% 4.0% 4.0% 3.6% 2.8% 2.7% 2.6% 2.3% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200403261400.pktlen.png)
detailed numbers
[ 16- 31]: 47930
[ 32- 63]: 3352322
[ 64- 127]: 1931092
[ 128- 255]: 195495
[ 256- 511]: 216803
[ 512- 1023]: 286872
[ 1024- 2047]: 1576702
Protocol Breakdown
![[protocol breakdown chart]](200403261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7607216 (100.00%) 2989648310 (100.00%) 393.00
ip 7536806 ( 99.07%) 2987517159 ( 99.93%) 396.39
tcp 6758857 ( 88.85%) 2876208016 ( 96.21%) 425.55
http(s) 1700005 ( 22.35%) 1005318196 ( 33.63%) 591.36
http(c) 2459360 ( 32.33%) 1172580986 ( 39.22%) 476.78
squid 79221 ( 1.04%) 8300079 ( 0.28%) 104.77
smtp 320756 ( 4.22%) 94716504 ( 3.17%) 295.29
nntp 38134 ( 0.50%) 31189373 ( 1.04%) 817.89
ftp 30286 ( 0.40%) 18686127 ( 0.63%) 616.99
pop3 8041 ( 0.11%) 1683308 ( 0.06%) 209.34
imap 297 ( 0.00%) 23440 ( 0.00%) 78.92
telnet 1468 ( 0.02%) 250490 ( 0.01%) 170.63
ssh 1530 ( 0.02%) 164242 ( 0.01%) 107.35
dns 3362 ( 0.04%) 251519 ( 0.01%) 74.81
bgp 159 ( 0.00%) 41164 ( 0.00%) 258.89
napster 9935 ( 0.13%) 1564146 ( 0.05%) 157.44
realaud 37 ( 0.00%) 5416 ( 0.00%) 146.38
rtsp 138806 ( 1.82%) 10203591 ( 0.34%) 73.51
icecast 38089 ( 0.50%) 2900109 ( 0.10%) 76.14
hotline 19 ( 0.00%) 1897 ( 0.00%) 99.84
other 1928348 ( 25.35%) 528283080 ( 17.67%) 273.96
udp 485953 ( 6.39%) 91357771 ( 3.06%) 188.00
dns 266506 ( 3.50%) 35096876 ( 1.17%) 131.69
realaud 12436 ( 0.16%) 5489282 ( 0.18%) 441.40
halflif 1 ( 0.00%) 814 ( 0.00%) 814.00
everque 6 ( 0.00%) 1464 ( 0.00%) 244.00
other 206936 ( 2.72%) 50765382 ( 1.70%) 245.32
icmp 216452 ( 2.85%) 17104975 ( 0.57%) 79.02
ip6 1166 ( 0.02%) 316997 ( 0.01%) 271.87
other 74378 ( 0.98%) 2529400 ( 0.08%) 34.01
frag 486 ( 0.01%) 263306 ( 0.01%) 541.78
tcpdump file: 200403261400.dump.gz (221.80 MB)