Traffic Trace Info
DumpFile: 200111251400.dump
FileSize: 200.18MB
Id: 200111251400
StartTime: Sun Nov 25 14:00:00 2001
EndTime: Sun Nov 25 14:11:51 2001
TotalTime: 710.21 seconds
TotalCapSize: 154.65MB CapLen: 96 bytes
# of packets: 2983584 (1705.60MB)
AvgRate: 20.15Mbps stddev:1.43M
IP flow (unique src/dst pair) Information
# of flows: 76017 (avg. 39.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 2.5% 1.3% 1.2% 1.2% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 49987
Top 10 bandwidth usage (bytes/total in %):
36.4% 9.5% 9.5% 6.4% 5.2% 3.3% 3.0% 2.9% 2.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111251400.pktlen.png)
detailed numbers
[ 16- 31]: 25072
[ 32- 63]: 1089345
[ 64- 127]: 405994
[ 128- 255]: 127312
[ 256- 511]: 82239
[ 512- 1023]: 265673
[ 1024- 2047]: 987949
Protocol Breakdown
![[protocol breakdown chart]](200111251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2983584 (100.00%) 1788452321 (100.00%) 599.43
ip 2934883 ( 98.37%) 1786954321 ( 99.92%) 608.87
tcp 2679037 ( 89.79%) 1750793392 ( 97.89%) 653.52
http(s) 545550 ( 18.29%) 577327982 ( 32.28%) 1058.25
http(c) 348529 ( 11.68%) 29070076 ( 1.63%) 83.41
squid 28369 ( 0.95%) 22880027 ( 1.28%) 806.52
smtp 16418 ( 0.55%) 4237123 ( 0.24%) 258.08
nntp 269 ( 0.01%) 17435 ( 0.00%) 64.81
ftp 122900 ( 4.12%) 96322640 ( 5.39%) 783.75
pop3 3961 ( 0.13%) 1784070 ( 0.10%) 450.41
imap 181 ( 0.01%) 13648 ( 0.00%) 75.40
telnet 427 ( 0.01%) 28009 ( 0.00%) 65.59
ssh 1563 ( 0.05%) 176618 ( 0.01%) 113.00
dns 2753 ( 0.09%) 210925 ( 0.01%) 76.62
bgp 196 ( 0.01%) 44307 ( 0.00%) 226.06
napster 237796 ( 7.97%) 115177908 ( 6.44%) 484.36
rtsp 51 ( 0.00%) 6193 ( 0.00%) 121.43
icecast 1457 ( 0.05%) 1348082 ( 0.08%) 925.25
hotline 15636 ( 0.52%) 14651494 ( 0.82%) 937.04
other 1352641 ( 45.34%) 887484575 ( 49.62%) 656.11
udp 168250 ( 5.64%) 26403734 ( 1.48%) 156.93
dns 119304 ( 4.00%) 15296692 ( 0.86%) 128.22
rip 140 ( 0.00%) 14220 ( 0.00%) 101.57
halflif 747 ( 0.03%) 244271 ( 0.01%) 327.00
quake 973 ( 0.03%) 134322 ( 0.01%) 138.05
other 47046 ( 1.58%) 10701788 ( 0.60%) 227.47
icmp 69437 ( 2.33%) 9101820 ( 0.51%) 131.08
ipsec 57 ( 0.00%) 9274 ( 0.00%) 162.70
ip6 361 ( 0.01%) 39717 ( 0.00%) 110.02
other 17741 ( 0.59%) 606384 ( 0.03%) 34.18
frag 1397 ( 0.05%) 1449563 ( 0.08%) 1037.63
tcpdump file: 200111251400.dump.gz (79.01 MB)