Traffic Trace Info
DumpFile: 200403271400.dump
FileSize: 471.24MB
Id: 200403271400
StartTime: Sat Mar 27 14:00:00 2004
EndTime: Sat Mar 27 14:15:00 2004
TotalTime: 900.06 seconds
TotalCapSize: 370.59MB CapLen: 96 bytes
# of packets: 6595546 (2623.57MB)
AvgRate: 24.45Mbps stddev:0.52M
IP flow (unique src/dst pair) Information
# of flows: 1017839 (avg. 6.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.3% 2.1% 2.1% 2.0% 2.0% 1.9% 1.8% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 812450
Top 10 bandwidth usage (bytes/total in %):
43.0% 4.5% 3.2% 2.9% 2.7% 2.6% 2.6% 2.4% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200403271400.pktlen.png)
detailed numbers
[ 16- 31]: 36828
[ 32- 63]: 3029718
[ 64- 127]: 1529698
[ 128- 255]: 127118
[ 256- 511]: 169225
[ 512- 1023]: 204464
[ 1024- 2047]: 1498495
Protocol Breakdown
![[protocol breakdown chart]](200403271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6595546 (100.00%) 2751012971 (100.00%) 417.10
ip 6543839 ( 99.22%) 2749455079 ( 99.94%) 420.16
tcp 5950195 ( 90.22%) 2672538748 ( 97.15%) 449.15
http(s) 1550791 ( 23.51%) 815182928 ( 29.63%) 525.66
http(c) 2355851 ( 35.72%) 1274776868 ( 46.34%) 541.11
squid 32072 ( 0.49%) 5014329 ( 0.18%) 156.35
smtp 193354 ( 2.93%) 45469003 ( 1.65%) 235.16
nntp 55739 ( 0.85%) 45609408 ( 1.66%) 818.27
ftp 36183 ( 0.55%) 14513227 ( 0.53%) 401.11
pop3 2272 ( 0.03%) 448071 ( 0.02%) 197.21
imap 184 ( 0.00%) 14465 ( 0.00%) 78.61
telnet 996 ( 0.02%) 101946 ( 0.00%) 102.36
ssh 280 ( 0.00%) 20160 ( 0.00%) 72.00
dns 1419 ( 0.02%) 107354 ( 0.00%) 75.65
bgp 158 ( 0.00%) 29498 ( 0.00%) 186.70
napster 33606 ( 0.51%) 14592747 ( 0.53%) 434.23
realaud 20 ( 0.00%) 1720 ( 0.00%) 86.00
rtsp 4187 ( 0.06%) 1680008 ( 0.06%) 401.24
icecast 7728 ( 0.12%) 1287307 ( 0.05%) 166.58
other 1674377 ( 25.39%) 453643227 ( 16.49%) 270.93
udp 319801 ( 4.85%) 57097632 ( 2.08%) 178.54
dns 203024 ( 3.08%) 26130364 ( 0.95%) 128.71
realaud 2 ( 0.00%) 173 ( 0.00%) 86.50
halflif 3 ( 0.00%) 343 ( 0.00%) 114.33
everque 7 ( 0.00%) 629 ( 0.00%) 89.86
quake 1 ( 0.00%) 87 ( 0.00%) 87.00
other 116087 ( 1.76%) 30912113 ( 1.12%) 266.28
icmp 223533 ( 3.39%) 17853579 ( 0.65%) 79.87
ip6 1141 ( 0.02%) 292666 ( 0.01%) 256.50
other 49169 ( 0.75%) 1672454 ( 0.06%) 34.01
frag 1910 ( 0.03%) 1302617 ( 0.05%) 682.00
tcpdump file: 200403271400.dump.gz (191.24 MB)