Traffic Trace Info
DumpFile: 200403301400.dump
FileSize: 541.37MB
Id: 200403301400
StartTime: Tue Mar 30 14:00:01 2004
EndTime: Tue Mar 30 14:15:01 2004
TotalTime: 900.04 seconds
TotalCapSize: 425.20MB CapLen: 96 bytes
# of packets: 7613699 (2911.06MB)
AvgRate: 27.13Mbps stddev:0.51M
IP flow (unique src/dst pair) Information
# of flows: 836045 (avg. 9.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 1.3% 1.2% 1.2% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 678809
Top 10 bandwidth usage (bytes/total in %):
34.5% 7.3% 6.6% 3.9% 2.5% 2.2% 1.9% 1.7% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200403301400.pktlen.png)
detailed numbers
[ 16- 31]: 47247
[ 32- 63]: 3234018
[ 64- 127]: 1988685
[ 128- 255]: 205171
[ 256- 511]: 218944
[ 512- 1023]: 320552
[ 1024- 2047]: 1599082
Protocol Breakdown
![[protocol breakdown chart]](200403301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7613699 (100.00%) 3052471101 (100.00%) 400.92
ip 7542971 ( 99.07%) 3050326461 ( 99.93%) 404.39
tcp 6787489 ( 89.15%) 2952435242 ( 96.72%) 434.98
http(s) 1835968 ( 24.11%) 1091916433 ( 35.77%) 594.74
http(c) 2709196 ( 35.58%) 1231466180 ( 40.34%) 454.55
squid 29146 ( 0.38%) 9853742 ( 0.32%) 338.08
smtp 441073 ( 5.79%) 136814036 ( 4.48%) 310.18
nntp 42304 ( 0.56%) 35034621 ( 1.15%) 828.16
ftp 98229 ( 1.29%) 38779649 ( 1.27%) 394.79
pop3 8718 ( 0.11%) 2227595 ( 0.07%) 255.52
imap 429 ( 0.01%) 33252 ( 0.00%) 77.51
telnet 3291 ( 0.04%) 421909 ( 0.01%) 128.20
ssh 2412 ( 0.03%) 310949 ( 0.01%) 128.92
dns 1398 ( 0.02%) 90333 ( 0.00%) 64.62
bgp 164 ( 0.00%) 29998 ( 0.00%) 182.91
napster 3774 ( 0.05%) 1829927 ( 0.06%) 484.88
realaud 6237 ( 0.08%) 408559 ( 0.01%) 65.51
rtsp 20382 ( 0.27%) 4359825 ( 0.14%) 213.91
icecast 9860 ( 0.13%) 1752185 ( 0.06%) 177.71
hotline 7 ( 0.00%) 998 ( 0.00%) 142.57
other 1573363 ( 20.66%) 397028562 ( 13.01%) 252.34
udp 447425 ( 5.88%) 77032602 ( 2.52%) 172.17
dns 312706 ( 4.11%) 40919150 ( 1.34%) 130.86
realaud 5070 ( 0.07%) 1259044 ( 0.04%) 248.33
halflif 2 ( 0.00%) 561 ( 0.00%) 280.50
everque 2 ( 0.00%) 170 ( 0.00%) 85.00
quake 8 ( 0.00%) 528 ( 0.00%) 66.00
other 129490 ( 1.70%) 34840519 ( 1.14%) 269.06
icmp 227291 ( 2.99%) 17927526 ( 0.59%) 78.87
ip6 1176 ( 0.02%) 224101 ( 0.01%) 190.56
other 79590 ( 1.05%) 2706990 ( 0.09%) 34.01
frag 1096 ( 0.01%) 352243 ( 0.01%) 321.39
tcpdump file: 200403301400.dump.gz (222.68 MB)