Traffic Trace Info
DumpFile: 200111121400.dump
FileSize: 200.75MB
Id: 200111121400
StartTime: Mon Nov 12 14:00:00 2001
EndTime: Mon Nov 12 14:07:16 2001
TotalTime: 435.25 seconds
TotalCapSize: 155.21MB CapLen: 96 bytes
# of packets: 2984862 (1795.93MB)
AvgRate: 34.61Mbps stddev:2.99M
IP flow (unique src/dst pair) Information
# of flows: 102323 (avg. 29.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 3.2% 1.9% 1.8% 1.5% 1.3% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 63818
Top 10 bandwidth usage (bytes/total in %):
5.6% 5.6% 4.2% 4.1% 3.4% 3.2% 3.2% 2.8% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111121400.pktlen.png)
detailed numbers
[ 16- 31]: 45370
[ 32- 63]: 949524
[ 64- 127]: 376502
[ 128- 255]: 136624
[ 256- 511]: 128882
[ 512- 1023]: 321241
[ 1024- 2047]: 1026719
Protocol Breakdown
![[protocol breakdown chart]](200111121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2984862 (100.00%) 1883167868 (100.00%) 630.91
ip 2908655 ( 97.45%) 1880851510 ( 99.88%) 646.64
tcp 2635773 ( 88.30%) 1833675513 ( 97.37%) 695.69
http(s) 924217 ( 30.96%) 906935290 ( 48.16%) 981.30
http(c) 393227 ( 13.17%) 41512345 ( 2.20%) 105.57
squid 11708 ( 0.39%) 5729997 ( 0.30%) 489.41
smtp 55016 ( 1.84%) 29247851 ( 1.55%) 531.62
nntp 16260 ( 0.54%) 18431014 ( 0.98%) 1133.52
ftp 31695 ( 1.06%) 20496565 ( 1.09%) 646.68
pop3 4062 ( 0.14%) 790197 ( 0.04%) 194.53
imap 83 ( 0.00%) 6577 ( 0.00%) 79.24
telnet 1429 ( 0.05%) 524328 ( 0.03%) 366.92
ssh 1914 ( 0.06%) 381951 ( 0.02%) 199.56
dns 10453 ( 0.35%) 763236 ( 0.04%) 73.02
bgp 107 ( 0.00%) 22429 ( 0.00%) 209.62
napster 395681 ( 13.26%) 238009694 ( 12.64%) 601.52
realaud 23 ( 0.00%) 1777 ( 0.00%) 77.26
rtsp 12484 ( 0.42%) 8580054 ( 0.46%) 687.28
icecast 416 ( 0.01%) 62448 ( 0.00%) 150.12
other 776579 ( 26.02%) 562163709 ( 29.85%) 723.90
udp 198198 ( 6.64%) 41031369 ( 2.18%) 207.02
dns 134100 ( 4.49%) 16963557 ( 0.90%) 126.50
rip 113 ( 0.00%) 12638 ( 0.00%) 111.84
realaud 5952 ( 0.20%) 2555215 ( 0.14%) 429.30
halflif 996 ( 0.03%) 138967 ( 0.01%) 139.53
everque 2135 ( 0.07%) 135940 ( 0.01%) 63.67
quake 526 ( 0.02%) 76645 ( 0.00%) 145.71
other 54276 ( 1.82%) 21095493 ( 1.12%) 388.67
icmp 49329 ( 1.65%) 4083103 ( 0.22%) 82.77
ipsec 13 ( 0.00%) 1690 ( 0.00%) 130.00
ip6 3050 ( 0.10%) 1301726 ( 0.07%) 426.80
other 22292 ( 0.75%) 758109 ( 0.04%) 34.01
frag 13069 ( 0.44%) 12210013 ( 0.65%) 934.27
tcpdump file: 200111121400.dump.gz (78.96 MB)