Traffic Trace Info
DumpFile: 200404051400.dump
FileSize: 517.70MB
Id: 200404051400
StartTime: Mon Apr 5 14:00:00 2004
EndTime: Mon Apr 5 14:15:00 2004
TotalTime: 899.56 seconds
TotalCapSize: 406.09MB CapLen: 96 bytes
# of packets: 7314320 (2910.56MB)
AvgRate: 27.14Mbps stddev:0.56M
IP flow (unique src/dst pair) Information
# of flows: 819213 (avg. 8.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.1% 1.7% 1.6% 1.3% 1.3% 1.3% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 658962
Top 10 bandwidth usage (bytes/total in %):
41.5% 8.4% 5.0% 2.4% 2.3% 2.2% 2.0% 1.7% 1.6% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200404051400.pktlen.png)
detailed numbers
[ 16- 31]: 43808
[ 32- 63]: 3321169
[ 64- 127]: 1636831
[ 128- 255]: 144499
[ 256- 511]: 203075
[ 512- 1023]: 337421
[ 1024- 2047]: 1627517
Protocol Breakdown
![[protocol breakdown chart]](200404051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7314320 (100.00%) 3051941921 (100.00%) 417.26
ip 7248907 ( 99.11%) 3049959416 ( 99.94%) 420.75
tcp 6604380 ( 90.29%) 2973348696 ( 97.42%) 450.21
http(s) 1711477 ( 23.40%) 785139988 ( 25.73%) 458.75
http(c) 2606230 ( 35.63%) 1384773025 ( 45.37%) 531.33
squid 23365 ( 0.32%) 5004624 ( 0.16%) 214.19
smtp 263795 ( 3.61%) 67203228 ( 2.20%) 254.76
nntp 33690 ( 0.46%) 27850896 ( 0.91%) 826.68
ftp 29016 ( 0.40%) 8182921 ( 0.27%) 282.01
pop3 4237 ( 0.06%) 752446 ( 0.02%) 177.59
imap 339 ( 0.00%) 26315 ( 0.00%) 77.63
telnet 391 ( 0.01%) 97962 ( 0.00%) 250.54
ssh 6490 ( 0.09%) 2282838 ( 0.07%) 351.75
dns 367 ( 0.01%) 24696 ( 0.00%) 67.29
bgp 226 ( 0.00%) 41477 ( 0.00%) 183.53
napster 3309 ( 0.05%) 2474107 ( 0.08%) 747.69
realaud 3571 ( 0.05%) 638090 ( 0.02%) 178.69
rtsp 30591 ( 0.42%) 2570839 ( 0.08%) 84.04
icecast 5232 ( 0.07%) 718445 ( 0.02%) 137.32
other 1880920 ( 25.72%) 685517837 ( 22.46%) 364.46
udp 347616 ( 4.75%) 56546941 ( 1.85%) 162.67
dns 233695 ( 3.20%) 30588417 ( 1.00%) 130.89
realaud 10758 ( 0.15%) 3121024 ( 0.10%) 290.11
halflif 2 ( 0.00%) 306 ( 0.00%) 153.00
everque 1 ( 0.00%) 86 ( 0.00%) 86.00
other 103106 ( 1.41%) 22835138 ( 0.75%) 221.47
icmp 227350 ( 3.11%) 17650708 ( 0.58%) 77.64
ip6 336 ( 0.00%) 57683 ( 0.00%) 171.68
other 69225 ( 0.95%) 2355388 ( 0.08%) 34.03
frag 833 ( 0.01%) 512464 ( 0.02%) 615.20
tcpdump file: 200404051400.dump.gz (212.60 MB)