Traffic Trace Info
DumpFile: 200109301400.dump
FileSize: 183.61MB
Id: 200109301400
StartTime: Sun Sep 30 14:00:00 2001
EndTime: Sun Sep 30 14:07:57 2001
TotalTime: 476.69 seconds
TotalCapSize: 137.94MB CapLen: 96 bytes
# of packets: 2992709 (799.42MB)
AvgRate: 14.07Mbps stddev:1.28M
IP flow (unique src/dst pair) Information
# of flows: 88215 (avg. 33.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.6% 2.6% 2.3% 2.1% 1.8% 1.6% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 66332
Top 10 bandwidth usage (bytes/total in %):
22.0% 5.7% 4.9% 3.6% 3.6% 3.3% 2.7% 2.6% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200109301400.pktlen.png)
detailed numbers
[ 16- 31]: 25143
[ 32- 63]: 2066206
[ 64- 127]: 256658
[ 128- 255]: 62736
[ 256- 511]: 48715
[ 512- 1023]: 148131
[ 1024- 2047]: 385120
Protocol Breakdown
![[protocol breakdown chart]](200109301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2992709 (100.00%) 838256996 (100.00%) 280.10
ip 2964448 ( 99.06%) 837411110 ( 99.90%) 282.48
tcp 1262803 ( 42.20%) 711485386 ( 84.88%) 563.42
http(s) 256934 ( 8.59%) 257689762 ( 30.74%) 1002.94
http(c) 267495 ( 8.94%) 23194852 ( 2.77%) 86.71
squid 323 ( 0.01%) 94324 ( 0.01%) 292.02
smtp 20113 ( 0.67%) 9709315 ( 1.16%) 482.74
nntp 29766 ( 0.99%) 30373415 ( 3.62%) 1020.41
ftp 58826 ( 1.97%) 26313562 ( 3.14%) 447.31
pop3 1275 ( 0.04%) 222188 ( 0.03%) 174.27
imap 17 ( 0.00%) 1427 ( 0.00%) 83.94
telnet 62 ( 0.00%) 5312 ( 0.00%) 85.68
ssh 627 ( 0.02%) 89574 ( 0.01%) 142.86
dns 809 ( 0.03%) 54527 ( 0.01%) 67.40
bgp 158 ( 0.01%) 39948 ( 0.00%) 252.84
napster 122668 ( 4.10%) 72338007 ( 8.63%) 589.71
realaud 676 ( 0.02%) 40560 ( 0.00%) 60.00
rtsp 2906 ( 0.10%) 1075344 ( 0.13%) 370.04
icecast 48 ( 0.00%) 13762 ( 0.00%) 286.71
other 499851 ( 16.70%) 290220241 ( 34.62%) 580.61
udp 113942 ( 3.81%) 29994397 ( 3.58%) 263.24
dns 85733 ( 2.86%) 11913304 ( 1.42%) 138.96
rip 98 ( 0.00%) 10608 ( 0.00%) 108.24
realaud 1526 ( 0.05%) 1054060 ( 0.13%) 690.73
halflif 76 ( 0.00%) 4659 ( 0.00%) 61.30
quake 3 ( 0.00%) 180 ( 0.00%) 60.00
cuseeme 2 ( 0.00%) 476 ( 0.00%) 238.00
other 26488 ( 0.89%) 17010524 ( 2.03%) 642.20
icmp 1540696 ( 51.48%) 94313198 ( 11.25%) 61.21
ip6 144 ( 0.00%) 16932 ( 0.00%) 117.58
other 46863 ( 1.57%) 1601197 ( 0.19%) 34.17
frag 603 ( 0.02%) 465967 ( 0.06%) 772.75
tcpdump file: 200109301400.dump.gz (57.95 MB)