Traffic Trace Info
DumpFile: 200111271400.dump
FileSize: 197.79MB
Id: 200111271400
StartTime: Tue Nov 27 14:00:00 2001
EndTime: Tue Nov 27 14:07:45 2001
TotalTime: 464.57 seconds
TotalCapSize: 152.30MB CapLen: 96 bytes
# of packets: 2981159 (1788.90MB)
AvgRate: 32.30Mbps stddev:2.85M
IP flow (unique src/dst pair) Information
# of flows: 84572 (avg. 35.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.4% 2.0% 1.4% 1.2% 1.1% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 49345
Top 10 bandwidth usage (bytes/total in %):
7.4% 5.9% 4.6% 3.0% 2.6% 2.6% 2.4% 2.3% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111271400.pktlen.png)
detailed numbers
[ 16- 31]: 45185
[ 32- 63]: 1012687
[ 64- 127]: 324871
[ 128- 255]: 135118
[ 256- 511]: 140682
[ 512- 1023]: 289750
[ 1024- 2047]: 1032866
Protocol Breakdown
![[protocol breakdown chart]](200111271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2981159 (100.00%) 1875796367 (100.00%) 629.22
ip 2899983 ( 97.28%) 1873314436 ( 99.87%) 645.97
tcp 2643804 ( 88.68%) 1797160462 ( 95.81%) 679.76
http(s) 803683 ( 26.96%) 761127302 ( 40.58%) 947.05
http(c) 359379 ( 12.06%) 38571495 ( 2.06%) 107.33
squid 2918 ( 0.10%) 2445924 ( 0.13%) 838.22
smtp 59251 ( 1.99%) 21619448 ( 1.15%) 364.88
nntp 2001 ( 0.07%) 693883 ( 0.04%) 346.77
ftp 169651 ( 5.69%) 169949025 ( 9.06%) 1001.76
pop3 4696 ( 0.16%) 869069 ( 0.05%) 185.07
imap 526 ( 0.02%) 40009 ( 0.00%) 76.06
telnet 1378 ( 0.05%) 638314 ( 0.03%) 463.22
ssh 1838 ( 0.06%) 210125 ( 0.01%) 114.32
dns 1194 ( 0.04%) 88916 ( 0.00%) 74.47
bgp 168 ( 0.01%) 44959 ( 0.00%) 267.61
napster 379566 ( 12.73%) 247253349 ( 13.18%) 651.41
realaud 100 ( 0.00%) 32790 ( 0.00%) 327.90
rtsp 18938 ( 0.64%) 16590917 ( 0.88%) 876.06
icecast 474 ( 0.02%) 80593 ( 0.00%) 170.03
hotline 12578 ( 0.42%) 11449110 ( 0.61%) 910.25
other 825058 ( 27.68%) 525440385 ( 28.01%) 636.85
udp 197325 ( 6.62%) 69493001 ( 3.70%) 352.18
dns 75234 ( 2.52%) 11567450 ( 0.62%) 153.75
rip 89 ( 0.00%) 9054 ( 0.00%) 101.73
realaud 34990 ( 1.17%) 26098582 ( 1.39%) 745.89
halflif 561 ( 0.02%) 75426 ( 0.00%) 134.45
starcra 13317 ( 0.45%) 860244 ( 0.05%) 64.60
everque 2896 ( 0.10%) 183113 ( 0.01%) 63.23
quake 279 ( 0.01%) 39982 ( 0.00%) 143.30
other 69137 ( 2.32%) 30465984 ( 1.62%) 440.66
icmp 31710 ( 1.06%) 5729090 ( 0.31%) 180.67
ipsec 39 ( 0.00%) 6366 ( 0.00%) 163.23
ip6 53 ( 0.00%) 5590 ( 0.00%) 105.47
other 27052 ( 0.91%) 919927 ( 0.05%) 34.01
frag 14816 ( 0.50%) 15925353 ( 0.85%) 1074.88
tcpdump file: 200111271400.dump.gz (81.49 MB)