Traffic Trace Info
DumpFile: 200009211359.dump
FileSize: 143.91MB
Id: 200009211359
StartTime: Thu Sep 21 13:59:00 2000
EndTime: Thu Sep 21 19:54:27 2000
TotalTime: 21326.88 seconds
TotalCapSize: 111.96MB CapLen: 76 bytes
# of packets: 2094332 (1170.86MB)
AvgRate: 460.54Kbps stddev:347.76K
IP flow (unique src/dst pair) Information
# of flows: 57634 (avg. 36.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 5.9% 3.8% 3.8% 3.5% 3.1% 2.2% 1.9% 1.7% 1.7%
IP address Information
# of IPv4 addresses: 43665
Top 10 bandwidth usage (bytes/total in %):
63.6% 12.5% 7.6% 5.9% 4.6% 3.9% 3.9% 3.5% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200009211359.pktlen.png)
detailed numbers
[ 32- 63]: 290635
[ 64- 127]: 817533
[ 128- 255]: 81187
[ 256- 511]: 56414
[ 512- 1023]: 190236
[ 1024- 2047]: 658327
Protocol Breakdown
![[protocol breakdown chart]](200009211359.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2094332 (100.00%) 1227737132 (100.00%) 586.22
ip 2094216 ( 99.99%) 1227730766 (100.00%) 586.25
tcp 1342995 ( 64.13%) 1153196411 ( 93.93%) 858.68
http(s) 940929 ( 44.93%) 957530214 ( 77.99%) 1017.64
http(c) 69126 ( 3.30%) 7609179 ( 0.62%) 110.08
squid 685 ( 0.03%) 94268 ( 0.01%) 137.62
smtp 10769 ( 0.51%) 3493912 ( 0.28%) 324.44
ftp 27387 ( 1.31%) 27252326 ( 2.22%) 995.08
pop3 1020 ( 0.05%) 195648 ( 0.02%) 191.81
telnet 353 ( 0.02%) 81058 ( 0.01%) 229.63
ssh 189 ( 0.01%) 19587 ( 0.00%) 103.63
dns 749 ( 0.04%) 86894 ( 0.01%) 116.01
bgp 26692 ( 1.27%) 1785049 ( 0.15%) 66.88
realaud 11 ( 0.00%) 1475 ( 0.00%) 134.09
rtsp 35130 ( 1.68%) 2223420 ( 0.18%) 63.29
other 229947 ( 10.98%) 152822901 ( 12.45%) 664.60
udp 684012 ( 32.66%) 61892343 ( 5.04%) 90.48
dns 679640 ( 32.45%) 61447838 ( 5.00%) 90.41
realaud 9 ( 0.00%) 589 ( 0.00%) 65.44
halflif 1 ( 0.00%) 74 ( 0.00%) 74.00
quake 1 ( 0.00%) 86 ( 0.00%) 86.00
other 4361 ( 0.21%) 443756 ( 0.04%) 101.76
icmp 50753 ( 2.42%) 6861106 ( 0.56%) 135.19
igmp 2109 ( 0.10%) 126540 ( 0.01%) 60.00
ospf 14347 ( 0.69%) 5654366 ( 0.46%) 394.11
frag 8 ( 0.00%) 480 ( 0.00%) 60.00
tcpdump file: 200009211359.dump.gz (46.27 MB)