Traffic Trace Info
DumpFile: 200404071400.dump
FileSize: 475.62MB
Id: 200404071400
StartTime: Wed Apr 7 14:00:00 2004
EndTime: Wed Apr 7 14:15:00 2004
TotalTime: 900.01 seconds
TotalCapSize: 368.03MB CapLen: 96 bytes
# of packets: 7051036 (3676.22MB)
AvgRate: 34.26Mbps stddev:0.67M
IP flow (unique src/dst pair) Information
# of flows: 844755 (avg. 8.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
41.7% 0.8% 0.8% 0.8% 0.7% 0.7% 0.6% 0.5% 0.5% 0.4%
IP address Information
# of IPv4 addresses: 650426
Top 10 bandwidth usage (bytes/total in %):
41.7% 41.7% 27.4% 2.5% 2.0% 1.8% 1.4% 1.4% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200404071400.pktlen.png)
detailed numbers
[ 16- 31]: 35570
[ 32- 63]: 2539260
[ 64- 127]: 1200096
[ 128- 255]: 147094
[ 256- 511]: 186694
[ 512- 1023]: 263534
[ 1024- 2047]: 2678788
Protocol Breakdown
![[protocol breakdown chart]](200404071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 7051036 (100.00%) 3854795944 (100.00%) 546.70
ip 6990152 ( 99.14%) 3852929537 ( 99.95%) 551.19
tcp 4848148 ( 68.76%) 2163921127 ( 56.14%) 446.34
http(s) 1338669 ( 18.99%) 784026613 ( 20.34%) 585.68
http(c) 2072450 ( 29.39%) 1148728427 ( 29.80%) 554.29
squid 30344 ( 0.43%) 16225889 ( 0.42%) 534.73
smtp 200016 ( 2.84%) 34985602 ( 0.91%) 174.91
nntp 820 ( 0.01%) 460204 ( 0.01%) 561.22
ftp 10976 ( 0.16%) 5221862 ( 0.14%) 475.75
pop3 5882 ( 0.08%) 2880097 ( 0.07%) 489.65
imap 514 ( 0.01%) 39569 ( 0.00%) 76.98
telnet 639 ( 0.01%) 209628 ( 0.01%) 328.06
ssh 325 ( 0.00%) 38311 ( 0.00%) 117.88
dns 1231 ( 0.02%) 76147 ( 0.00%) 61.86
bgp 161 ( 0.00%) 40301 ( 0.00%) 250.32
napster 8219 ( 0.12%) 5176857 ( 0.13%) 629.86
realaud 1930 ( 0.03%) 804568 ( 0.02%) 416.87
rtsp 8926 ( 0.13%) 4614897 ( 0.12%) 517.02
icecast 5770 ( 0.08%) 429414 ( 0.01%) 74.42
other 1160178 ( 16.45%) 159902177 ( 4.15%) 137.83
udp 1872359 ( 26.55%) 1671773145 ( 43.37%) 892.87
dns 255672 ( 3.63%) 33367483 ( 0.87%) 130.51
realaud 1355 ( 0.02%) 639834 ( 0.02%) 472.20
halflif 1 ( 0.00%) 152 ( 0.00%) 152.00
everque 2 ( 0.00%) 214 ( 0.00%) 107.00
other 1615071 ( 22.91%) 1637756036 ( 42.49%) 1014.05
icmp 189820 ( 2.69%) 14482968 ( 0.38%) 76.30
ip6 307 ( 0.00%) 47233 ( 0.00%) 153.85
other 79518 ( 1.13%) 2705064 ( 0.07%) 34.02
frag 769 ( 0.01%) 152124 ( 0.00%) 197.82
tcpdump file: 200404071400.dump.gz (186.29 MB)