Traffic Trace Info
DumpFile: 200009081359.dump
FileSize: 142.33MB
Id: 200009081359
StartTime: Fri Sep 8 13:59:00 2000
EndTime: Fri Sep 8 16:47:12 2000
TotalTime: 10092.40 seconds
TotalCapSize: 110.37MB CapLen: 76 bytes
# of packets: 2094644 (1238.34MB)
AvgRate: 1.03Mbps stddev:0.37M
IP flow (unique src/dst pair) Information
# of flows: 66954 (avg. 31.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.2% 4.5% 4.1% 3.4% 2.3% 2.0% 2.0% 2.0% 1.8% 1.8%
IP address Information
# of IPv4 addresses: 46289
Top 10 bandwidth usage (bytes/total in %):
16.1% 15.3% 15.2% 14.4% 6.6% 6.1% 5.2% 4.1% 4.1% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200009081359.pktlen.png)
detailed numbers
[ 32- 63]: 404188
[ 64- 127]: 531502
[ 128- 255]: 63554
[ 256- 511]: 44993
[ 512- 1023]: 410784
[ 1024- 2047]: 639623
Protocol Breakdown
![[protocol breakdown chart]](200009081359.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2094644 (100.00%) 1298497912 (100.00%) 619.91
ip 2094584 (100.00%) 1298494582 (100.00%) 619.93
tcp 1626151 ( 77.63%) 1254212575 ( 96.59%) 771.28
http(s) 1192639 ( 56.94%) 1140218274 ( 87.81%) 956.05
http(c) 64364 ( 3.07%) 6120611 ( 0.47%) 95.09
squid 4820 ( 0.23%) 3050483 ( 0.23%) 632.88
smtp 20533 ( 0.98%) 9993774 ( 0.77%) 486.72
ftp 17384 ( 0.83%) 16197838 ( 1.25%) 931.77
pop3 3524 ( 0.17%) 216270 ( 0.02%) 61.37
imap 12 ( 0.00%) 888 ( 0.00%) 74.00
ssh 561 ( 0.03%) 178925 ( 0.01%) 318.94
dns 158 ( 0.01%) 19253 ( 0.00%) 121.85
bgp 11922 ( 0.57%) 806815 ( 0.06%) 67.67
napster 25745 ( 1.23%) 1548648 ( 0.12%) 60.15
realaud 155 ( 0.01%) 12041 ( 0.00%) 77.68
rtsp 117 ( 0.01%) 19930 ( 0.00%) 170.34
other 284217 ( 13.57%) 75828825 ( 5.84%) 266.80
udp 443388 ( 21.17%) 38215912 ( 2.94%) 86.19
dns 373581 ( 17.84%) 33270332 ( 2.56%) 89.06
rip 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 2776 ( 0.13%) 184321 ( 0.01%) 66.40
halflif 1 ( 0.00%) 60 ( 0.00%) 60.00
everque 2 ( 0.00%) 120 ( 0.00%) 60.00
unreal 2 ( 0.00%) 120 ( 0.00%) 60.00
quake 12 ( 0.00%) 1320 ( 0.00%) 110.00
suseeme 2 ( 0.00%) 120 ( 0.00%) 60.00
other 67009 ( 3.20%) 4759339 ( 0.37%) 71.03
icmp 12895 ( 0.62%) 1475311 ( 0.11%) 114.41
igmp 992 ( 0.05%) 59520 ( 0.00%) 60.00
ospf 11158 ( 0.53%) 4531264 ( 0.35%) 406.10
tcpdump file: 200009081359.dump.gz (45.24 MB)