Traffic Trace Info
DumpFile: 200109171400.dump
FileSize: 198.57MB
Id: 200109171400
StartTime: Mon Sep 17 14:00:00 2001
EndTime: Mon Sep 17 14:07:42 2001
TotalTime: 461.72 seconds
TotalCapSize: 153.20MB CapLen: 96 bytes
# of packets: 2973002 (1631.50MB)
AvgRate: 29.64Mbps stddev:3.20M
IP flow (unique src/dst pair) Information
# of flows: 110250 (avg. 26.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.4% 2.8% 2.5% 2.2% 1.5% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 78418
Top 10 bandwidth usage (bytes/total in %):
20.9% 4.6% 4.1% 3.8% 3.5% 3.4% 3.3% 3.0% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200109171400.pktlen.png)
detailed numbers
[ 16- 31]: 41627
[ 32- 63]: 1042606
[ 64- 127]: 387526
[ 128- 255]: 104145
[ 256- 511]: 94167
[ 512- 1023]: 408827
[ 1024- 2047]: 894104
Protocol Breakdown
![[protocol breakdown chart]](200109171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2973002 (100.00%) 1710749447 (100.00%) 575.43
ip 2927283 ( 98.46%) 1709386440 ( 99.92%) 583.95
tcp 2421921 ( 81.46%) 1606316314 ( 93.90%) 663.24
http(s) 793686 ( 26.70%) 767709718 ( 44.88%) 967.27
http(c) 474015 ( 15.94%) 42940321 ( 2.51%) 90.59
squid 33901 ( 1.14%) 30166406 ( 1.76%) 889.84
smtp 56889 ( 1.91%) 18404029 ( 1.08%) 323.51
nntp 234 ( 0.01%) 73317 ( 0.00%) 313.32
ftp 299081 ( 10.06%) 245745477 ( 14.36%) 821.67
pop3 2872 ( 0.10%) 510571 ( 0.03%) 177.78
imap 140 ( 0.00%) 12995 ( 0.00%) 92.82
telnet 827 ( 0.03%) 122790 ( 0.01%) 148.48
ssh 1104 ( 0.04%) 164080 ( 0.01%) 148.62
dns 2076 ( 0.07%) 178026 ( 0.01%) 85.75
bgp 110 ( 0.00%) 21661 ( 0.00%) 196.92
napster 128827 ( 4.33%) 89062538 ( 5.21%) 691.33
realaud 1372 ( 0.05%) 85536 ( 0.00%) 62.34
rtsp 3040 ( 0.10%) 372715 ( 0.02%) 122.60
icecast 10916 ( 0.37%) 833203 ( 0.05%) 76.33
hotline 3241 ( 0.11%) 2888028 ( 0.17%) 891.09
other 609120 ( 20.49%) 407007391 ( 23.79%) 668.19
udp 199283 ( 6.70%) 40815652 ( 2.39%) 204.81
dns 139596 ( 4.70%) 18505076 ( 1.08%) 132.56
rip 99 ( 0.00%) 10134 ( 0.00%) 102.36
realaud 18649 ( 0.63%) 8613789 ( 0.50%) 461.89
halflif 89 ( 0.00%) 5340 ( 0.00%) 60.00
quake 402 ( 0.01%) 55813 ( 0.00%) 138.84
other 40260 ( 1.35%) 13611004 ( 0.80%) 338.08
icmp 243637 ( 8.19%) 60106589 ( 3.51%) 246.71
ipsec 24 ( 0.00%) 4416 ( 0.00%) 184.00
ip6 133 ( 0.00%) 15249 ( 0.00%) 114.65
other 62285 ( 2.10%) 2128220 ( 0.12%) 34.17
frag 5584 ( 0.19%) 6047568 ( 0.35%) 1083.02
tcpdump file: 200109171400.dump.gz (76.61 MB)