Traffic Trace Info
DumpFile: 200111201400.dump
FileSize: 200.53MB
Id: 200111201400
StartTime: Tue Nov 20 14:00:00 2001
EndTime: Tue Nov 20 14:09:00 2001
TotalTime: 540.45 seconds
TotalCapSize: 154.91MB CapLen: 96 bytes
# of packets: 2989712 (1677.62MB)
AvgRate: 26.04Mbps stddev:2.44M
IP flow (unique src/dst pair) Information
# of flows: 109325 (avg. 27.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 61264
Top 10 bandwidth usage (bytes/total in %):
9.6% 2.6% 2.5% 2.4% 2.4% 2.1% 1.9% 1.9% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111201400.pktlen.png)
detailed numbers
[ 16- 31]: 36154
[ 32- 63]: 1011049
[ 64- 127]: 418106
[ 128- 255]: 166910
[ 256- 511]: 140929
[ 512- 1023]: 267524
[ 1024- 2047]: 949040
Protocol Breakdown
![[protocol breakdown chart]](200111201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2989712 (100.00%) 1759110271 (100.00%) 588.39
ip 2927680 ( 97.93%) 1757220702 ( 99.89%) 600.21
tcp 2622309 ( 87.71%) 1670641661 ( 94.97%) 637.09
http(s) 917699 ( 30.70%) 842215142 ( 47.88%) 917.75
http(c) 365750 ( 12.23%) 41110169 ( 2.34%) 112.40
squid 9948 ( 0.33%) 5627163 ( 0.32%) 565.66
smtp 73686 ( 2.46%) 26247759 ( 1.49%) 356.21
nntp 7858 ( 0.26%) 6301341 ( 0.36%) 801.90
ftp 96213 ( 3.22%) 41397334 ( 2.35%) 430.27
pop3 8216 ( 0.27%) 2669592 ( 0.15%) 324.93
imap 164 ( 0.01%) 12738 ( 0.00%) 77.67
telnet 2827 ( 0.09%) 401616 ( 0.02%) 142.06
ssh 444 ( 0.01%) 71531 ( 0.00%) 161.11
dns 1115 ( 0.04%) 76101 ( 0.00%) 68.25
bgp 242 ( 0.01%) 68791 ( 0.00%) 284.26
napster 318863 ( 10.67%) 187945662 ( 10.68%) 589.42
realaud 131 ( 0.00%) 32322 ( 0.00%) 246.73
rtsp 11966 ( 0.40%) 3618653 ( 0.21%) 302.41
icecast 717 ( 0.02%) 384445 ( 0.02%) 536.19
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 806144 ( 26.96%) 512448885 ( 29.13%) 635.68
udp 247325 ( 8.27%) 82107903 ( 4.67%) 331.98
dns 170276 ( 5.70%) 23494018 ( 1.34%) 137.98
rip 105 ( 0.00%) 10270 ( 0.00%) 97.81
realaud 9697 ( 0.32%) 6092711 ( 0.35%) 628.31
halflif 886 ( 0.03%) 100272 ( 0.01%) 113.17
everque 1 ( 0.00%) 60 ( 0.00%) 60.00
quake 724 ( 0.02%) 97793 ( 0.01%) 135.07
other 64911 ( 2.17%) 52091101 ( 2.96%) 802.50
icmp 38539 ( 1.29%) 3775750 ( 0.21%) 97.97
ipsec 43 ( 0.00%) 7022 ( 0.00%) 163.30
ip6 326 ( 0.01%) 37529 ( 0.00%) 115.12
other 19138 ( 0.64%) 650837 ( 0.04%) 34.01
frag 28495 ( 0.95%) 36470357 ( 2.07%) 1279.89
tcpdump file: 200111201400.dump.gz (83.10 MB)