Traffic Trace Info
DumpFile: 200109251400.dump
FileSize: 201.23MB
Id: 200109251400
StartTime: Tue Sep 25 14:00:00 2001
EndTime: Tue Sep 25 14:08:48 2001
TotalTime: 528.05 seconds
TotalCapSize: 155.57MB CapLen: 96 bytes
# of packets: 2991824 (1614.95MB)
AvgRate: 25.66Mbps stddev:3.80M
IP flow (unique src/dst pair) Information
# of flows: 167644 (avg. 17.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.9% 3.6% 2.7% 2.7% 1.8% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 118224
Top 10 bandwidth usage (bytes/total in %):
6.7% 5.3% 5.1% 4.5% 4.3% 4.3% 4.3% 4.0% 4.0% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200109251400.pktlen.png)
detailed numbers
[ 16- 31]: 34954
[ 32- 63]: 1106827
[ 64- 127]: 349611
[ 128- 255]: 113416
[ 256- 511]: 107488
[ 512- 1023]: 417118
[ 1024- 2047]: 862410
Protocol Breakdown
![[protocol breakdown chart]](200109251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2991824 (100.00%) 1693397590 (100.00%) 566.01
ip 2954337 ( 98.75%) 1692284720 ( 99.93%) 572.81
tcp 2499115 ( 83.53%) 1618898237 ( 95.60%) 647.79
http(s) 1067769 ( 35.69%) 1052185281 ( 62.13%) 985.41
http(c) 673664 ( 22.52%) 59613401 ( 3.52%) 88.49
squid 10736 ( 0.36%) 6649007 ( 0.39%) 619.32
smtp 68855 ( 2.30%) 23069377 ( 1.36%) 335.04
nntp 40 ( 0.00%) 2480 ( 0.00%) 62.00
ftp 27301 ( 0.91%) 13963365 ( 0.82%) 511.46
pop3 2410 ( 0.08%) 435258 ( 0.03%) 180.60
imap 136 ( 0.00%) 12973 ( 0.00%) 95.39
telnet 1183 ( 0.04%) 243297 ( 0.01%) 205.66
ssh 2583 ( 0.09%) 294259 ( 0.02%) 113.92
dns 4774 ( 0.16%) 347681 ( 0.02%) 72.83
bgp 147 ( 0.00%) 31330 ( 0.00%) 213.13
napster 269152 ( 9.00%) 189354299 ( 11.18%) 703.52
realaud 4630 ( 0.15%) 2578289 ( 0.15%) 556.87
rtsp 3573 ( 0.12%) 466927 ( 0.03%) 130.68
icecast 467 ( 0.02%) 203793 ( 0.01%) 436.39
hotline 70432 ( 2.35%) 47330320 ( 2.79%) 672.00
other 290863 ( 9.72%) 222101953 ( 13.12%) 763.60
udp 234562 ( 7.84%) 59377077 ( 3.51%) 253.14
dns 140063 ( 4.68%) 18151154 ( 1.07%) 129.59
rip 95 ( 0.00%) 9550 ( 0.00%) 100.53
realaud 32649 ( 1.09%) 17290671 ( 1.02%) 529.59
halflif 94 ( 0.00%) 5640 ( 0.00%) 60.00
everque 1 ( 0.00%) 75 ( 0.00%) 75.00
quake 8 ( 0.00%) 1109 ( 0.00%) 138.62
other 61590 ( 2.06%) 23888526 ( 1.41%) 387.86
icmp 183460 ( 6.13%) 12716181 ( 0.75%) 69.31
ipsec 24 ( 0.00%) 4416 ( 0.00%) 184.00
ip6 216 ( 0.01%) 25973 ( 0.00%) 120.25
other 36960 ( 1.24%) 1262836 ( 0.07%) 34.17
frag 231 ( 0.01%) 302526 ( 0.02%) 1309.64
tcpdump file: 200109251400.dump.gz (76.49 MB)