Traffic Trace Info
DumpFile: 200111081400.dump
FileSize: 198.52MB
Id: 200111081400
StartTime: Thu Nov 8 14:00:01 2001
EndTime: Thu Nov 8 14:06:26 2001
TotalTime: 385.11 seconds
TotalCapSize: 153.12MB CapLen: 96 bytes
# of packets: 2975278 (1806.30MB)
AvgRate: 39.35Mbps stddev:2.91M
IP flow (unique src/dst pair) Information
# of flows: 88717 (avg. 33.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 4.3% 1.2% 1.1% 1.1% 1.1% 1.1% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 53237
Top 10 bandwidth usage (bytes/total in %):
15.1% 5.7% 5.1% 4.6% 4.4% 4.0% 2.8% 2.6% 2.6% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111081400.pktlen.png)
detailed numbers
[ 16- 31]: 51751
[ 32- 63]: 845830
[ 64- 127]: 391536
[ 128- 255]: 124785
[ 256- 511]: 149787
[ 512- 1023]: 409885
[ 1024- 2047]: 1001704
Protocol Breakdown
![[protocol breakdown chart]](200111081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2975278 (100.00%) 1894038336 (100.00%) 636.59
ip 2885419 ( 96.98%) 1891299688 ( 99.86%) 655.47
tcp 2629693 ( 88.38%) 1836515555 ( 96.96%) 698.38
http(s) 912640 ( 30.67%) 847060649 ( 44.72%) 928.14
http(c) 257939 ( 8.67%) 27462292 ( 1.45%) 106.47
squid 2221 ( 0.07%) 1451942 ( 0.08%) 653.73
smtp 55748 ( 1.87%) 20134618 ( 1.06%) 361.17
nntp 178 ( 0.01%) 23604 ( 0.00%) 132.61
ftp 91982 ( 3.09%) 42775122 ( 2.26%) 465.04
pop3 3765 ( 0.13%) 911804 ( 0.05%) 242.18
imap 84 ( 0.00%) 13564 ( 0.00%) 161.48
telnet 287 ( 0.01%) 47226 ( 0.00%) 164.55
ssh 2284 ( 0.08%) 167963 ( 0.01%) 73.54
dns 1453 ( 0.05%) 90059 ( 0.00%) 61.98
bgp 85 ( 0.00%) 14151 ( 0.00%) 166.48
napster 361871 ( 12.16%) 240665846 ( 12.71%) 665.06
realaud 4806 ( 0.16%) 1976759 ( 0.10%) 411.31
rtsp 2591 ( 0.09%) 1573122 ( 0.08%) 607.15
icecast 5533 ( 0.19%) 3327540 ( 0.18%) 601.40
other 925815 ( 31.12%) 648804388 ( 34.26%) 700.79
udp 197121 ( 6.63%) 50816846 ( 2.68%) 257.80
dns 113742 ( 3.82%) 13884674 ( 0.73%) 122.07
rip 101 ( 0.00%) 11466 ( 0.00%) 113.52
realaud 15232 ( 0.51%) 8531696 ( 0.45%) 560.12
halflif 388 ( 0.01%) 48515 ( 0.00%) 125.04
quake 15358 ( 0.52%) 1479630 ( 0.08%) 96.34
other 52105 ( 1.75%) 26844739 ( 1.42%) 515.20
icmp 31856 ( 1.07%) 3036931 ( 0.16%) 95.33
ipsec 14 ( 0.00%) 1820 ( 0.00%) 130.00
ip6 273 ( 0.01%) 28548 ( 0.00%) 104.57
other 26462 ( 0.89%) 899988 ( 0.05%) 34.01
frag 12823 ( 0.43%) 14221554 ( 0.75%) 1109.07
tcpdump file: 200111081400.dump.gz (80.07 MB)