Traffic Trace Info
DumpFile: 200101221400.dump
FileSize: 200.33MB
Id: 200101221400
StartTime: Mon Jan 22 14:00:00 2001
EndTime: Mon Jan 22 14:08:43 2001
TotalTime: 523.52 seconds
TotalCapSize: 154.60MB CapLen: 96 bytes
# of packets: 2996751 (1688.41MB)
AvgRate: 27.06Mbps stddev:3.25M
IP flow (unique src/dst pair) Information
# of flows: 56845 (avg. 52.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.7% 2.7% 2.6% 2.6% 2.2% 1.8% 1.8% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 27639
Top 10 bandwidth usage (bytes/total in %):
5.9% 4.5% 4.5% 4.4% 4.4% 3.5% 3.4% 2.9% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200101221400.pktlen.png)
detailed numbers
[ 16- 31]: 31326
[ 32- 63]: 1082820
[ 64- 127]: 293066
[ 128- 255]: 162786
[ 256- 511]: 173595
[ 512- 1023]: 334628
[ 1024- 2047]: 918530
Protocol Breakdown
![[protocol breakdown chart]](200101221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2996751 (100.00%) 1770423358 (100.00%) 590.78
ip 2962438 ( 98.85%) 1769404608 ( 99.94%) 597.28
tcp 2633038 ( 87.86%) 1709220852 ( 96.54%) 649.14
http(s) 1080284 ( 36.05%) 1270206820 ( 71.75%) 1175.81
http(c) 350788 ( 11.71%) 34424345 ( 1.94%) 98.13
squid 39745 ( 1.33%) 14599869 ( 0.82%) 367.34
smtp 67481 ( 2.25%) 16048133 ( 0.91%) 237.82
nntp 2717 ( 0.09%) 165443 ( 0.01%) 60.89
ftp 101194 ( 3.38%) 45968980 ( 2.60%) 454.27
pop3 12174 ( 0.41%) 843927 ( 0.05%) 69.32
telnet 5181 ( 0.17%) 580178 ( 0.03%) 111.98
ssh 3746 ( 0.13%) 263153 ( 0.01%) 70.25
dns 3031 ( 0.10%) 188279 ( 0.01%) 62.12
bgp 204 ( 0.01%) 61027 ( 0.00%) 299.15
napster 120386 ( 4.02%) 76113350 ( 4.30%) 632.24
rtsp 3978 ( 0.13%) 1499768 ( 0.08%) 377.02
icecast 189 ( 0.01%) 34882 ( 0.00%) 184.56
hotline 9362 ( 0.31%) 8112650 ( 0.46%) 866.55
other 832562 ( 27.78%) 240109088 ( 13.56%) 288.40
udp 253918 ( 8.47%) 55830152 ( 3.15%) 219.87
dns 204434 ( 6.82%) 36442260 ( 2.06%) 178.26
rip 215 ( 0.01%) 39270 ( 0.00%) 182.65
realaud 13565 ( 0.45%) 7300137 ( 0.41%) 538.16
everque 1 ( 0.00%) 60 ( 0.00%) 60.00
quake 2 ( 0.00%) 124 ( 0.00%) 62.00
other 35701 ( 1.19%) 12048301 ( 0.68%) 337.48
icmp 31966 ( 1.07%) 2820768 ( 0.16%) 88.24
igmp 53 ( 0.00%) 3180 ( 0.00%) 60.00
ip6 125 ( 0.00%) 52167 ( 0.00%) 417.34
other 43338 ( 1.45%) 1477489 ( 0.08%) 34.09
frag 5670 ( 0.19%) 4535054 ( 0.26%) 799.83
tcpdump file: 200101221400.dump.gz (75.33 MB)