Traffic Trace Info
DumpFile: 200111141400.dump
FileSize: 196.25MB
Id: 200111141400
StartTime: Wed Nov 14 14:00:00 2001
EndTime: Wed Nov 14 14:07:13 2001
TotalTime: 432.76 seconds
TotalCapSize: 150.67MB CapLen: 96 bytes
# of packets: 2987685 (1609.74MB)
AvgRate: 31.20Mbps stddev:3.29M
IP flow (unique src/dst pair) Information
# of flows: 121721 (avg. 24.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 3.0% 2.4% 2.1% 1.9% 1.8% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 82584
Top 10 bandwidth usage (bytes/total in %):
3.8% 3.4% 3.1% 3.0% 3.0% 3.0% 2.6% 2.5% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111141400.pktlen.png)
detailed numbers
[ 16- 31]: 41648
[ 32- 63]: 855723
[ 64- 127]: 678078
[ 128- 255]: 119251
[ 256- 511]: 116217
[ 512- 1023]: 284202
[ 1024- 2047]: 892566
Protocol Breakdown
![[protocol breakdown chart]](200111141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2987685 (100.00%) 1687931675 (100.00%) 564.96
ip 2918255 ( 97.68%) 1685822805 ( 99.88%) 577.68
tcp 2234396 ( 74.79%) 1543906293 ( 91.47%) 690.97
http(s) 731017 ( 24.47%) 727717601 ( 43.11%) 995.49
http(c) 354820 ( 11.88%) 36388884 ( 2.16%) 102.56
squid 55688 ( 1.86%) 52371902 ( 3.10%) 940.45
smtp 54662 ( 1.83%) 20019443 ( 1.19%) 366.24
nntp 12185 ( 0.41%) 11910017 ( 0.71%) 977.43
ftp 37311 ( 1.25%) 25369313 ( 1.50%) 679.94
pop3 2575 ( 0.09%) 420147 ( 0.02%) 163.16
imap 168 ( 0.01%) 12549 ( 0.00%) 74.70
telnet 1230 ( 0.04%) 581219 ( 0.03%) 472.54
ssh 1852 ( 0.06%) 317421 ( 0.02%) 171.39
dns 1625 ( 0.05%) 106637 ( 0.01%) 65.62
bgp 113 ( 0.00%) 24744 ( 0.00%) 218.97
napster 424052 ( 14.19%) 296266201 ( 17.55%) 698.66
realaud 84 ( 0.00%) 9193 ( 0.00%) 109.44
rtsp 6979 ( 0.23%) 5826083 ( 0.35%) 834.80
icecast 14865 ( 0.50%) 11007308 ( 0.65%) 740.48
hotline 37282 ( 1.25%) 35854282 ( 2.12%) 961.70
other 497522 ( 16.65%) 319689723 ( 18.94%) 642.56
udp 332142 ( 11.12%) 106911604 ( 6.33%) 321.89
dns 124199 ( 4.16%) 16097646 ( 0.95%) 129.61
rip 112 ( 0.00%) 12692 ( 0.00%) 113.32
realaud 8328 ( 0.28%) 4088121 ( 0.24%) 490.89
halflif 857 ( 0.03%) 124908 ( 0.01%) 145.75
quake 36322 ( 1.22%) 3969439 ( 0.24%) 109.28
other 162202 ( 5.43%) 82595913 ( 4.89%) 509.22
icmp 331530 ( 11.10%) 34292597 ( 2.03%) 103.44
ipsec 14 ( 0.00%) 1820 ( 0.00%) 130.00
ip6 344 ( 0.01%) 36122 ( 0.00%) 105.01
other 19829 ( 0.66%) 674369 ( 0.04%) 34.01
frag 373 ( 0.01%) 332672 ( 0.02%) 891.88
tcpdump file: 200111141400.dump.gz (75.70 MB)