Traffic Trace Info
DumpFile: 200108171400.dump
FileSize: 193.42MB
Id: 200108171400
StartTime: Fri Aug 17 14:00:00 2001
EndTime: Fri Aug 17 14:09:21 2001
TotalTime: 561.20 seconds
TotalCapSize: 147.74MB CapLen: 96 bytes
# of packets: 2993659 (2391.42MB)
AvgRate: 35.76Mbps stddev:4.86M
IP flow (unique src/dst pair) Information
# of flows: 176865 (avg. 16.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.9% 2.4% 1.7% 1.4% 1.3% 1.1% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 152565
Top 10 bandwidth usage (bytes/total in %):
54.1% 6.0% 3.0% 2.9% 2.9% 2.4% 2.0% 1.7% 1.7% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200108171400.pktlen.png)
detailed numbers
[ 16- 31]: 30661
[ 32- 63]: 756394
[ 64- 127]: 302319
[ 128- 255]: 96239
[ 256- 511]: 118314
[ 512- 1023]: 188179
[ 1024- 2047]: 1501553
Protocol Breakdown
![[protocol breakdown chart]](200108171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2993659 (100.00%) 2507581917 (100.00%) 837.63
ip 2961171 ( 98.91%) 2506619220 ( 99.96%) 846.50
tcp 1691415 ( 56.50%) 1071931863 ( 42.75%) 633.75
http(s) 539168 ( 18.01%) 551327865 ( 21.99%) 1022.55
http(c) 537321 ( 17.95%) 42763651 ( 1.71%) 79.59
squid 2737 ( 0.09%) 2178221 ( 0.09%) 795.84
smtp 39180 ( 1.31%) 11374536 ( 0.45%) 290.31
nntp 4121 ( 0.14%) 1753373 ( 0.07%) 425.47
ftp 146226 ( 4.88%) 137414591 ( 5.48%) 939.74
pop3 9169 ( 0.31%) 5679524 ( 0.23%) 619.43
imap 151 ( 0.01%) 31004 ( 0.00%) 205.32
telnet 1849 ( 0.06%) 278675 ( 0.01%) 150.72
ssh 1958 ( 0.07%) 381015 ( 0.02%) 194.59
dns 970 ( 0.03%) 65576 ( 0.00%) 67.60
bgp 170 ( 0.01%) 38137 ( 0.00%) 224.34
napster 107754 ( 3.60%) 86831401 ( 3.46%) 805.83
realaud 2630 ( 0.09%) 1599916 ( 0.06%) 608.33
rtsp 9284 ( 0.31%) 7016243 ( 0.28%) 755.73
icecast 39903 ( 1.33%) 35196837 ( 1.40%) 882.06
other 248503 ( 8.30%) 187988631 ( 7.50%) 756.48
udp 220523 ( 7.37%) 68391911 ( 2.73%) 310.14
dns 178597 ( 5.97%) 43905653 ( 1.75%) 245.84
rip 100 ( 0.00%) 11300 ( 0.00%) 113.00
realaud 4505 ( 0.15%) 1737533 ( 0.07%) 385.69
halflif 64 ( 0.00%) 3840 ( 0.00%) 60.00
everque 1 ( 0.00%) 87 ( 0.00%) 87.00
quake 4162 ( 0.14%) 406899 ( 0.02%) 97.77
other 32946 ( 1.10%) 22259476 ( 0.89%) 675.64
icmp 1020981 ( 34.10%) 1365299691 ( 54.45%) 1337.24
ipsec 43 ( 0.00%) 6886 ( 0.00%) 160.14
ip6 274 ( 0.01%) 34073 ( 0.00%) 124.35
other 27935 ( 0.93%) 954796 ( 0.04%) 34.18
frag 2696 ( 0.09%) 3555594 ( 0.14%) 1318.84
tcpdump file: 200108171400.dump.gz (69.16 MB)