Traffic Trace Info
DumpFile: 200111051400.dump
FileSize: 197.20MB
Id: 200111051400
StartTime: Mon Nov 5 14:00:00 2001
EndTime: Mon Nov 5 14:06:32 2001
TotalTime: 391.70 seconds
TotalCapSize: 151.68MB CapLen: 96 bytes
# of packets: 2982973 (1984.28MB)
AvgRate: 42.49Mbps stddev:4.94M
IP flow (unique src/dst pair) Information
# of flows: 89604 (avg. 33.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.6% 2.1% 1.8% 1.4% 1.3% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 54223
Top 10 bandwidth usage (bytes/total in %):
6.6% 6.3% 6.1% 5.7% 3.2% 2.7% 2.6% 2.5% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111051400.pktlen.png)
detailed numbers
[ 16- 31]: 50288
[ 32- 63]: 833610
[ 64- 127]: 323211
[ 128- 255]: 162944
[ 256- 511]: 169860
[ 512- 1023]: 274039
[ 1024- 2047]: 1169021
Protocol Breakdown
![[protocol breakdown chart]](200111051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2982973 (100.00%) 2080671891 (100.00%) 697.52
ip 2896332 ( 97.10%) 2078032884 ( 99.87%) 717.47
tcp 2563078 ( 85.92%) 1970724778 ( 94.72%) 768.89
http(s) 983549 ( 32.97%) 1105591273 ( 53.14%) 1124.08
http(c) 323283 ( 10.84%) 37994864 ( 1.83%) 117.53
squid 14299 ( 0.48%) 7011919 ( 0.34%) 490.38
smtp 56241 ( 1.89%) 22596960 ( 1.09%) 401.79
nntp 5428 ( 0.18%) 3182099 ( 0.15%) 586.24
ftp 48650 ( 1.63%) 31750707 ( 1.53%) 652.64
pop3 5266 ( 0.18%) 2254559 ( 0.11%) 428.14
imap 927 ( 0.03%) 61423 ( 0.00%) 66.26
telnet 1698 ( 0.06%) 568890 ( 0.03%) 335.04
ssh 1478 ( 0.05%) 336981 ( 0.02%) 228.00
dns 1364 ( 0.05%) 99501 ( 0.00%) 72.95
bgp 88 ( 0.00%) 17997 ( 0.00%) 204.51
napster 346884 ( 11.63%) 228355475 ( 10.98%) 658.31
realaud 4338 ( 0.15%) 2159806 ( 0.10%) 497.88
rtsp 4057 ( 0.14%) 2198640 ( 0.11%) 541.94
icecast 2044 ( 0.07%) 1567286 ( 0.08%) 766.77
other 763108 ( 25.58%) 524962760 ( 25.23%) 687.93
udp 273827 ( 9.18%) 97971130 ( 4.71%) 357.78
dns 106672 ( 3.58%) 13737266 ( 0.66%) 128.78
rip 84 ( 0.00%) 9084 ( 0.00%) 108.14
realaud 14731 ( 0.49%) 10766895 ( 0.52%) 730.90
halflif 82 ( 0.00%) 4939 ( 0.00%) 60.23
quake 4496 ( 0.15%) 512176 ( 0.02%) 113.92
other 142720 ( 4.78%) 66652184 ( 3.20%) 467.01
icmp 33654 ( 1.13%) 8430683 ( 0.41%) 250.51
ipsec 13 ( 0.00%) 1690 ( 0.00%) 130.00
ip6 329 ( 0.01%) 35899 ( 0.00%) 109.12
other 25431 ( 0.85%) 868704 ( 0.04%) 34.16
frag 32593 ( 1.09%) 37165391 ( 1.79%) 1140.29
tcpdump file: 200111051400.dump.gz (77.76 MB)