Traffic Trace Info
DumpFile: 200404041400.dump
FileSize: 380.04MB
Id: 200404041400
StartTime: Sun Apr 4 14:00:00 2004
EndTime: Sun Apr 4 14:15:00 2004
TotalTime: 899.78 seconds
TotalCapSize: 298.06MB CapLen: 96 bytes
# of packets: 5372922 (2538.92MB)
AvgRate: 23.67Mbps stddev:0.88M
IP flow (unique src/dst pair) Information
# of flows: 707917 (avg. 7.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 1.8% 1.7% 1.7% 1.7% 1.6% 1.6% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 531216
Top 10 bandwidth usage (bytes/total in %):
40.0% 4.9% 4.8% 4.8% 4.5% 3.5% 3.3% 3.1% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200404041400.pktlen.png)
detailed numbers
[ 16- 31]: 24702
[ 32- 63]: 2247109
[ 64- 127]: 1072017
[ 128- 255]: 144564
[ 256- 511]: 133056
[ 512- 1023]: 264322
[ 1024- 2047]: 1487152
Protocol Breakdown
![[protocol breakdown chart]](200404041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5372922 (100.00%) 2662251958 (100.00%) 495.49
ip 5338530 ( 99.36%) 2661216777 ( 99.96%) 498.49
tcp 4728353 ( 88.00%) 2563172712 ( 96.28%) 542.09
http(s) 1105493 ( 20.58%) 554426525 ( 20.83%) 501.52
http(c) 1461314 ( 27.20%) 1084021710 ( 40.72%) 741.81
squid 12495 ( 0.23%) 1211011 ( 0.05%) 96.92
smtp 173444 ( 3.23%) 25441881 ( 0.96%) 146.69
nntp 145432 ( 2.71%) 126529683 ( 4.75%) 870.03
ftp 14126 ( 0.26%) 6899064 ( 0.26%) 488.39
pop3 1316 ( 0.02%) 187222 ( 0.01%) 142.27
imap 63 ( 0.00%) 4852 ( 0.00%) 77.02
telnet 4001 ( 0.07%) 2473972 ( 0.09%) 618.34
ssh 2268 ( 0.04%) 197241 ( 0.01%) 86.97
dns 201 ( 0.00%) 14463 ( 0.00%) 71.96
bgp 157 ( 0.00%) 33425 ( 0.00%) 212.90
napster 8089 ( 0.15%) 2739335 ( 0.10%) 338.65
rtsp 27117 ( 0.50%) 35842559 ( 1.35%) 1321.77
icecast 884 ( 0.02%) 86877 ( 0.00%) 98.28
other 1771533 ( 32.97%) 723047156 ( 27.16%) 408.15
udp 374299 ( 6.97%) 80324703 ( 3.02%) 214.60
dns 165812 ( 3.09%) 21959809 ( 0.82%) 132.44
realaud 10337 ( 0.19%) 5037407 ( 0.19%) 487.32
halflif 5 ( 0.00%) 685 ( 0.00%) 137.00
everque 14 ( 0.00%) 944 ( 0.00%) 67.43
quake 2 ( 0.00%) 156 ( 0.00%) 78.00
other 198094 ( 3.69%) 53323443 ( 2.00%) 269.18
icmp 204142 ( 3.80%) 16594670 ( 0.62%) 81.29
ip6 329 ( 0.01%) 56083 ( 0.00%) 170.47
other 31407 ( 0.58%) 1068609 ( 0.04%) 34.02
frag 37 ( 0.00%) 15139 ( 0.00%) 409.16
tcpdump file: 200404041400.dump.gz (144.14 MB)