Traffic Trace Info
DumpFile: 200109201400.dump
FileSize: 204.27MB
Id: 200109201400
StartTime: Thu Sep 20 14:00:00 2001
EndTime: Thu Sep 20 14:08:05 2001
TotalTime: 485.41 seconds
TotalCapSize: 158.60MB CapLen: 96 bytes
# of packets: 2992833 (1368.21MB)
AvgRate: 23.64Mbps stddev:4.52M
IP flow (unique src/dst pair) Information
# of flows: 266004 (avg. 11.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 3.2% 3.1% 2.9% 1.8% 1.8% 1.7% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 182570
Top 10 bandwidth usage (bytes/total in %):
7.6% 6.9% 5.2% 5.2% 4.2% 4.1% 3.9% 3.9% 3.7% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200109201400.pktlen.png)
detailed numbers
[ 16- 31]: 32833
[ 32- 63]: 1131987
[ 64- 127]: 536754
[ 128- 255]: 112205
[ 256- 511]: 99257
[ 512- 1023]: 384999
[ 1024- 2047]: 694798
Protocol Breakdown
![[protocol breakdown chart]](200109201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2992833 (100.00%) 1434670438 (100.00%) 479.37
ip 2957491 ( 98.82%) 1433621084 ( 99.93%) 484.74
tcp 2478857 ( 82.83%) 1362077466 ( 94.94%) 549.48
http(s) 881836 ( 29.46%) 811023780 ( 56.53%) 919.70
http(c) 825841 ( 27.59%) 65829004 ( 4.59%) 79.71
squid 33186 ( 1.11%) 28849480 ( 2.01%) 869.33
smtp 77115 ( 2.58%) 33823398 ( 2.36%) 438.61
ftp 103532 ( 3.46%) 97417434 ( 6.79%) 940.94
pop3 3994 ( 0.13%) 1165022 ( 0.08%) 291.69
imap 50 ( 0.00%) 4685 ( 0.00%) 93.70
telnet 1289 ( 0.04%) 217966 ( 0.02%) 169.10
ssh 620 ( 0.02%) 124437 ( 0.01%) 200.70
dns 739 ( 0.02%) 50353 ( 0.00%) 68.14
bgp 160 ( 0.01%) 39485 ( 0.00%) 246.78
napster 163112 ( 5.45%) 119466031 ( 8.33%) 732.42
realaud 1237 ( 0.04%) 87736 ( 0.01%) 70.93
rtsp 86 ( 0.00%) 15100 ( 0.00%) 175.58
icecast 225 ( 0.01%) 115946 ( 0.01%) 515.32
hotline 31 ( 0.00%) 36836 ( 0.00%) 1188.26
other 385381 ( 12.88%) 203795035 ( 14.21%) 528.81
udp 216343 ( 7.23%) 33821215 ( 2.36%) 156.33
dns 163971 ( 5.48%) 20840986 ( 1.45%) 127.10
rip 99 ( 0.00%) 10914 ( 0.00%) 110.24
realaud 10399 ( 0.35%) 3425065 ( 0.24%) 329.36
halflif 141 ( 0.00%) 18361 ( 0.00%) 130.22
everque 8244 ( 0.28%) 551623 ( 0.04%) 66.91
quake 116 ( 0.00%) 12308 ( 0.00%) 106.10
other 32177 ( 1.08%) 8480597 ( 0.59%) 263.56
icmp 224856 ( 7.51%) 36421975 ( 2.54%) 161.98
ipsec 25 ( 0.00%) 4614 ( 0.00%) 184.56
ip6 188 ( 0.01%) 23946 ( 0.00%) 127.37
other 37222 ( 1.24%) 1271868 ( 0.09%) 34.17
frag 4345 ( 0.15%) 4897916 ( 0.34%) 1127.25
tcpdump file: 200109201400.dump.gz (80.96 MB)