Traffic Trace Info
DumpFile: 200101281400.dump
FileSize: 200.13MB
Id: 200101281400
StartTime: Sun Jan 28 14:00:00 2001
EndTime: Sun Jan 28 14:25:04 2001
TotalTime: 1504.07 seconds
TotalCapSize: 154.38MB CapLen: 96 bytes
# of packets: 2997975 (1444.35MB)
AvgRate: 8.06Mbps stddev:1.31M
IP flow (unique src/dst pair) Information
# of flows: 131919 (avg. 22.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 4.1% 3.9% 3.6% 3.0% 2.9% 2.6% 2.4% 1.9% 1.5%
IP address Information
# of IPv4 addresses: 100954
Top 10 bandwidth usage (bytes/total in %):
11.5% 7.1% 6.2% 6.0% 4.5% 4.1% 3.9% 3.9% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200101281400.pktlen.png)
detailed numbers
[ 16- 31]: 8094
[ 32- 63]: 813559
[ 64- 127]: 459193
[ 128- 255]: 480979
[ 256- 511]: 193808
[ 512- 1023]: 312405
[ 1024- 2047]: 729937
Protocol Breakdown
![[protocol breakdown chart]](200101281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2997975 (100.00%) 1514505983 (100.00%) 505.18
ip 2989274 ( 99.71%) 1514248512 ( 99.98%) 506.56
tcp 1934366 ( 64.52%) 1180537711 ( 77.95%) 610.30
http(s) 636855 ( 21.24%) 676587533 ( 44.67%) 1062.39
http(c) 403017 ( 13.44%) 39335082 ( 2.60%) 97.60
squid 58741 ( 1.96%) 41611891 ( 2.75%) 708.40
smtp 81090 ( 2.70%) 26081825 ( 1.72%) 321.64
ftp 113108 ( 3.77%) 101748292 ( 6.72%) 899.57
pop3 8166 ( 0.27%) 2334383 ( 0.15%) 285.87
telnet 483 ( 0.02%) 72927 ( 0.00%) 150.99
ssh 3 ( 0.00%) 192 ( 0.00%) 64.00
dns 1004 ( 0.03%) 114356 ( 0.01%) 113.90
bgp 331 ( 0.01%) 49639 ( 0.00%) 149.97
napster 194717 ( 6.49%) 96174491 ( 6.35%) 493.92
realaud 9933 ( 0.33%) 4631965 ( 0.31%) 466.32
rtsp 8958 ( 0.30%) 3201313 ( 0.21%) 357.37
icecast 2268 ( 0.08%) 808473 ( 0.05%) 356.47
other 415653 ( 13.86%) 187783009 ( 12.40%) 451.78
udp 942317 ( 31.43%) 324821146 ( 21.45%) 344.70
dns 652058 ( 21.75%) 115663169 ( 7.64%) 177.38
rip 268 ( 0.01%) 26288 ( 0.00%) 98.09
realaud 90811 ( 3.03%) 58950449 ( 3.89%) 649.16
starcra 8 ( 0.00%) 480 ( 0.00%) 60.00
everque 1 ( 0.00%) 72 ( 0.00%) 72.00
other 199162 ( 6.64%) 150176035 ( 9.92%) 754.04
icmp 105067 ( 3.50%) 8384889 ( 0.55%) 79.81
igmp 151 ( 0.01%) 9060 ( 0.00%) 60.00
ipsec 50 ( 0.00%) 8700 ( 0.00%) 174.00
ip6 504 ( 0.02%) 254516 ( 0.02%) 504.99
other 6819 ( 0.23%) 232490 ( 0.02%) 34.09
frag 86659 ( 2.89%) 114002345 ( 7.53%) 1315.53
tcpdump file: 200101281400.dump.gz (69.43 MB)