Traffic Trace Info
DumpFile: 200111041400.dump
FileSize: 197.04MB
Id: 200111041400
StartTime: Sun Nov 4 14:00:00 2001
EndTime: Sun Nov 4 14:13:48 2001
TotalTime: 828.76 seconds
TotalCapSize: 151.37MB CapLen: 96 bytes
# of packets: 2993084 (1549.11MB)
AvgRate: 15.68Mbps stddev:2.29M
IP flow (unique src/dst pair) Information
# of flows: 117544 (avg. 25.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 3.6% 2.5% 2.4% 2.2% 2.2% 2.0% 1.5% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 79931
Top 10 bandwidth usage (bytes/total in %):
7.6% 7.6% 5.9% 4.3% 3.8% 3.7% 3.5% 2.9% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111041400.pktlen.png)
detailed numbers
[ 16- 31]: 18532
[ 32- 63]: 1094374
[ 64- 127]: 522976
[ 128- 255]: 170938
[ 256- 511]: 105236
[ 512- 1023]: 170881
[ 1024- 2047]: 910147
Protocol Breakdown
![[protocol breakdown chart]](200111041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2993084 (100.00%) 1624361884 (100.00%) 542.71
ip 2960104 ( 98.90%) 1623354595 ( 99.94%) 548.41
tcp 2269354 ( 75.82%) 1459750474 ( 89.87%) 643.24
http(s) 588038 ( 19.65%) 641041166 ( 39.46%) 1090.14
http(c) 347567 ( 11.61%) 31274798 ( 1.93%) 89.98
squid 18489 ( 0.62%) 10491697 ( 0.65%) 567.46
smtp 41885 ( 1.40%) 15771525 ( 0.97%) 376.54
nntp 37659 ( 1.26%) 38481473 ( 2.37%) 1021.84
ftp 41221 ( 1.38%) 30654437 ( 1.89%) 743.66
pop3 3547 ( 0.12%) 382871 ( 0.02%) 107.94
imap 163 ( 0.01%) 13149 ( 0.00%) 80.67
telnet 688 ( 0.02%) 52779 ( 0.00%) 76.71
ssh 1846 ( 0.06%) 214384 ( 0.01%) 116.13
dns 1562 ( 0.05%) 113249 ( 0.01%) 72.50
bgp 167 ( 0.01%) 28527 ( 0.00%) 170.82
napster 272200 ( 9.09%) 150584083 ( 9.27%) 553.21
realaud 8 ( 0.00%) 1334 ( 0.00%) 166.75
rtsp 39971 ( 1.34%) 29756693 ( 1.83%) 744.46
icecast 772 ( 0.03%) 282275 ( 0.02%) 365.64
other 873353 ( 29.18%) 510597998 ( 31.43%) 584.64
udp 342488 ( 11.44%) 98020807 ( 6.03%) 286.20
dns 157463 ( 5.26%) 19572022 ( 1.20%) 124.30
rip 188 ( 0.01%) 20648 ( 0.00%) 109.83
realaud 59463 ( 1.99%) 57667351 ( 3.55%) 969.80
halflif 1465 ( 0.05%) 212152 ( 0.01%) 144.81
quake 36607 ( 1.22%) 4176630 ( 0.26%) 114.09
other 87064 ( 2.91%) 16231255 ( 1.00%) 186.43
icmp 337497 ( 11.28%) 65180252 ( 4.01%) 193.13
ipsec 28 ( 0.00%) 3640 ( 0.00%) 130.00
ip6 473 ( 0.02%) 50327 ( 0.00%) 106.40
other 10264 ( 0.34%) 349095 ( 0.02%) 34.01
frag 2388 ( 0.08%) 2986559 ( 0.18%) 1250.65
tcpdump file: 200111041400.dump.gz (73.75 MB)