Traffic Trace Info
DumpFile: 200111261400.dump
FileSize: 199.50MB
Id: 200111261400
StartTime: Mon Nov 26 14:00:00 2001
EndTime: Mon Nov 26 14:08:24 2001
TotalTime: 504.18 seconds
TotalCapSize: 153.95MB CapLen: 96 bytes
# of packets: 2985144 (1996.73MB)
AvgRate: 33.23Mbps stddev:4.08M
IP flow (unique src/dst pair) Information
# of flows: 84435 (avg. 35.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.1% 2.7% 1.9% 1.5% 1.4% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 50135
Top 10 bandwidth usage (bytes/total in %):
4.0% 4.0% 3.4% 3.4% 3.2% 3.1% 3.1% 3.1% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111261400.pktlen.png)
detailed numbers
[ 16- 31]: 42219
[ 32- 63]: 905636
[ 64- 127]: 307886
[ 128- 255]: 137222
[ 256- 511]: 138929
[ 512- 1023]: 260050
[ 1024- 2047]: 1193202
Protocol Breakdown
![[protocol breakdown chart]](200111261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2985144 (100.00%) 2093719506 (100.00%) 701.38
ip 2913237 ( 97.59%) 2091530417 ( 99.90%) 717.94
tcp 2700972 ( 90.48%) 2054497224 ( 98.13%) 760.65
http(s) 979558 ( 32.81%) 981693034 ( 46.89%) 1002.18
http(c) 329308 ( 11.03%) 35262640 ( 1.68%) 107.08
squid 13484 ( 0.45%) 16841174 ( 0.80%) 1248.97
smtp 64083 ( 2.15%) 23476782 ( 1.12%) 366.35
nntp 15524 ( 0.52%) 16394634 ( 0.78%) 1056.08
ftp 132096 ( 4.43%) 139557846 ( 6.67%) 1056.49
pop3 4644 ( 0.16%) 832806 ( 0.04%) 179.33
imap 66 ( 0.00%) 6007 ( 0.00%) 91.02
telnet 1681 ( 0.06%) 755495 ( 0.04%) 449.43
ssh 2802 ( 0.09%) 551715 ( 0.03%) 196.90
dns 1344 ( 0.05%) 90179 ( 0.00%) 67.10
bgp 145 ( 0.00%) 35652 ( 0.00%) 245.88
napster 467412 ( 15.66%) 346213921 ( 16.54%) 740.70
realaud 22 ( 0.00%) 1320 ( 0.00%) 60.00
rtsp 1014 ( 0.03%) 404805 ( 0.02%) 399.22
icecast 1366 ( 0.05%) 824224 ( 0.04%) 603.39
hotline 32174 ( 1.08%) 30399999 ( 1.45%) 944.86
other 653915 ( 21.91%) 461142891 ( 22.03%) 705.20
udp 160066 ( 5.36%) 30561557 ( 1.46%) 190.93
dns 96357 ( 3.23%) 12602571 ( 0.60%) 130.79
rip 64 ( 0.00%) 5764 ( 0.00%) 90.06
realaud 12765 ( 0.43%) 4373605 ( 0.21%) 342.62
halflif 100 ( 0.00%) 6000 ( 0.00%) 60.00
starcra 2 ( 0.00%) 120 ( 0.00%) 60.00
quake 497 ( 0.02%) 71743 ( 0.00%) 144.35
other 50238 ( 1.68%) 13489683 ( 0.64%) 268.52
icmp 30130 ( 1.01%) 5713077 ( 0.27%) 189.61
ipsec 17 ( 0.00%) 2210 ( 0.00%) 130.00
ip6 58 ( 0.00%) 6115 ( 0.00%) 105.43
other 21994 ( 0.74%) 750234 ( 0.04%) 34.11
frag 1016 ( 0.03%) 1050659 ( 0.05%) 1034.11
tcpdump file: 200111261400.dump.gz (79.41 MB)