Traffic Trace Info
DumpFile: 200403291400.dump
FileSize: 505.62MB
Id: 200403291400
StartTime: Mon Mar 29 14:00:00 2004
EndTime: Mon Mar 29 14:15:00 2004
TotalTime: 900.08 seconds
TotalCapSize: 397.22MB CapLen: 96 bytes
# of packets: 7103970 (2720.08MB)
AvgRate: 25.35Mbps stddev:0.71M
IP flow (unique src/dst pair) Information
# of flows: 878557 (avg. 8.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.3% 1.4% 1.3% 1.3% 1.3% 1.2% 1.2% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 633086
Top 10 bandwidth usage (bytes/total in %):
35.1% 5.5% 5.4% 4.1% 3.6% 3.3% 1.9% 1.7% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200403291400.pktlen.png)
detailed numbers
[ 16- 31]: 42474
[ 32- 63]: 2992360
[ 64- 127]: 1858897
[ 128- 255]: 181591
[ 256- 511]: 233946
[ 512- 1023]: 304118
[ 1024- 2047]: 1490584
Protocol Breakdown
![[protocol breakdown chart]](200403291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7103970 (100.00%) 2852211271 (100.00%) 401.50
ip 7042660 ( 99.14%) 2850358687 ( 99.94%) 404.73
tcp 6222341 ( 87.59%) 2714019583 ( 95.15%) 436.17
http(s) 1798685 ( 25.32%) 1034980956 ( 36.29%) 575.41
http(c) 2396084 ( 33.73%) 1130333757 ( 39.63%) 471.74
squid 32083 ( 0.45%) 7273883 ( 0.26%) 226.72
smtp 284494 ( 4.00%) 81587335 ( 2.86%) 286.78
nntp 26690 ( 0.38%) 21785203 ( 0.76%) 816.23
ftp 29966 ( 0.42%) 11348304 ( 0.40%) 378.71
pop3 6749 ( 0.10%) 1446335 ( 0.05%) 214.30
imap 907 ( 0.01%) 127201 ( 0.00%) 140.24
telnet 2001 ( 0.03%) 264534 ( 0.01%) 132.20
ssh 7509 ( 0.11%) 5590109 ( 0.20%) 744.45
dns 1385 ( 0.02%) 90621 ( 0.00%) 65.43
bgp 159 ( 0.00%) 36106 ( 0.00%) 227.08
napster 25597 ( 0.36%) 7529584 ( 0.26%) 294.16
realaud 35 ( 0.00%) 2334 ( 0.00%) 66.69
rtsp 508 ( 0.01%) 134588 ( 0.00%) 264.94
icecast 11465 ( 0.16%) 739749 ( 0.03%) 64.52
other 1596932 ( 22.48%) 410701746 ( 14.40%) 257.18
udp 513680 ( 7.23%) 114832145 ( 4.03%) 223.55
dns 288143 ( 4.06%) 37038904 ( 1.30%) 128.54
realaud 61268 ( 0.86%) 40127583 ( 1.41%) 654.95
halflif 2 ( 0.00%) 262 ( 0.00%) 131.00
everque 1 ( 0.00%) 84 ( 0.00%) 84.00
other 164149 ( 2.31%) 37656169 ( 1.32%) 229.40
icmp 245236 ( 3.45%) 19204735 ( 0.67%) 78.31
ip6 1143 ( 0.02%) 252249 ( 0.01%) 220.69
other 60260 ( 0.85%) 2049975 ( 0.07%) 34.02
frag 602 ( 0.01%) 332634 ( 0.01%) 552.55
tcpdump file: 200403291400.dump.gz (212.98 MB)