Traffic Trace Info
DumpFile: 200111221400.dump
FileSize: 201.46MB
Id: 200111221400
StartTime: Thu Nov 22 14:00:00 2001
EndTime: Thu Nov 22 14:08:19 2001
TotalTime: 499.33 seconds
TotalCapSize: 155.94MB CapLen: 96 bytes
# of packets: 2983285 (1719.45MB)
AvgRate: 28.89Mbps stddev:2.15M
IP flow (unique src/dst pair) Information
# of flows: 110017 (avg. 27.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 3.2% 2.6% 1.4% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 69748
Top 10 bandwidth usage (bytes/total in %):
10.7% 6.9% 6.9% 4.2% 3.3% 3.2% 3.0% 2.6% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111221400.pktlen.png)
detailed numbers
[ 16- 31]: 38643
[ 32- 63]: 859688
[ 64- 127]: 513013
[ 128- 255]: 149194
[ 256- 511]: 140615
[ 512- 1023]: 322919
[ 1024- 2047]: 959213
Protocol Breakdown
![[protocol breakdown chart]](200111221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2983285 (100.00%) 1802968904 (100.00%) 604.36
ip 2917707 ( 97.80%) 1800973286 ( 99.89%) 617.26
tcp 2676153 ( 89.70%) 1757687838 ( 97.49%) 656.80
http(s) 788425 ( 26.43%) 703387461 ( 39.01%) 892.14
http(c) 273329 ( 9.16%) 29639669 ( 1.64%) 108.44
squid 9482 ( 0.32%) 9121758 ( 0.51%) 962.01
smtp 74430 ( 2.49%) 23215509 ( 1.29%) 311.91
nntp 13479 ( 0.45%) 13847014 ( 0.77%) 1027.30
ftp 109112 ( 3.66%) 102726815 ( 5.70%) 941.48
pop3 4962 ( 0.17%) 895078 ( 0.05%) 180.39
imap 59 ( 0.00%) 5229 ( 0.00%) 88.63
telnet 1662 ( 0.06%) 808075 ( 0.04%) 486.21
ssh 1028 ( 0.03%) 94947 ( 0.01%) 92.36
dns 33583 ( 1.13%) 2486980 ( 0.14%) 74.05
bgp 144 ( 0.00%) 31915 ( 0.00%) 221.63
napster 337181 ( 11.30%) 193579050 ( 10.74%) 574.11
realaud 59 ( 0.00%) 3594 ( 0.00%) 60.92
rtsp 1191 ( 0.04%) 125469 ( 0.01%) 105.35
icecast 937 ( 0.03%) 129970 ( 0.01%) 138.71
hotline 2 ( 0.00%) 263 ( 0.00%) 131.50
other 1026703 ( 34.42%) 677575091 ( 37.58%) 659.95
udp 183764 ( 6.16%) 38941089 ( 2.16%) 211.91
dns 141144 ( 4.73%) 18231149 ( 1.01%) 129.17
rip 108 ( 0.00%) 10188 ( 0.00%) 94.33
realaud 12323 ( 0.41%) 5553378 ( 0.31%) 450.65
halflif 86 ( 0.00%) 5160 ( 0.00%) 60.00
everque 178 ( 0.01%) 197712 ( 0.01%) 1110.74
quake 685 ( 0.02%) 106649 ( 0.01%) 155.69
other 28990 ( 0.97%) 14695209 ( 0.82%) 506.91
icmp 37681 ( 1.26%) 3636229 ( 0.20%) 96.50
ipsec 41 ( 0.00%) 6626 ( 0.00%) 161.61
ip6 262 ( 0.01%) 27944 ( 0.00%) 106.66
other 19806 ( 0.66%) 673560 ( 0.04%) 34.01
frag 7626 ( 0.26%) 9507974 ( 0.53%) 1246.78
tcpdump file: 200111221400.dump.gz (80.59 MB)