Traffic Trace Info
DumpFile: 200111291400.dump
FileSize: 198.12MB
Id: 200111291400
StartTime: Thu Nov 29 14:00:00 2001
EndTime: Thu Nov 29 14:08:50 2001
TotalTime: 530.54 seconds
TotalCapSize: 152.57MB CapLen: 96 bytes
# of packets: 2985364 (1911.52MB)
AvgRate: 30.21Mbps stddev:2.64M
IP flow (unique src/dst pair) Information
# of flows: 84417 (avg. 35.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.2% 1.8% 1.8% 1.3% 1.3% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 53231
Top 10 bandwidth usage (bytes/total in %):
5.3% 4.6% 4.6% 3.2% 2.9% 2.8% 2.6% 2.5% 2.5% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200111291400.pktlen.png)
detailed numbers
[ 16- 31]: 39956
[ 32- 63]: 920546
[ 64- 127]: 290341
[ 128- 255]: 180105
[ 256- 511]: 163845
[ 512- 1023]: 279559
[ 1024- 2047]: 1111012
Protocol Breakdown
![[protocol breakdown chart]](200111291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2985364 (100.00%) 2004378769 (100.00%) 671.40
ip 2917225 ( 97.72%) 2002304360 ( 99.90%) 686.37
tcp 2641414 ( 88.48%) 1914207492 ( 95.50%) 724.69
http(s) 1064474 ( 35.66%) 1115446986 ( 55.65%) 1047.89
http(c) 389127 ( 13.03%) 39436890 ( 1.97%) 101.35
squid 64826 ( 2.17%) 54883267 ( 2.74%) 846.62
smtp 41831 ( 1.40%) 13760963 ( 0.69%) 328.97
nntp 3734 ( 0.13%) 2139497 ( 0.11%) 572.98
ftp 77208 ( 2.59%) 57208592 ( 2.85%) 740.97
pop3 4377 ( 0.15%) 1239637 ( 0.06%) 283.22
imap 197 ( 0.01%) 17518 ( 0.00%) 88.92
telnet 943 ( 0.03%) 275806 ( 0.01%) 292.48
ssh 18005 ( 0.60%) 16166832 ( 0.81%) 897.91
dns 1062 ( 0.04%) 71344 ( 0.00%) 67.18
bgp 183 ( 0.01%) 46843 ( 0.00%) 255.97
napster 374620 ( 12.55%) 230707446 ( 11.51%) 615.84
realaud 203 ( 0.01%) 56124 ( 0.00%) 276.47
rtsp 5908 ( 0.20%) 2850807 ( 0.14%) 482.53
icecast 3809 ( 0.13%) 3569211 ( 0.18%) 937.05
hotline 6 ( 0.00%) 932 ( 0.00%) 155.33
other 590567 ( 19.78%) 376316392 ( 18.77%) 637.21
udp 212473 ( 7.12%) 80068342 ( 3.99%) 376.84
dns 91815 ( 3.08%) 13329713 ( 0.67%) 145.18
rip 83 ( 0.00%) 7578 ( 0.00%) 91.30
realaud 9736 ( 0.33%) 5489717 ( 0.27%) 563.86
halflif 256 ( 0.01%) 60993 ( 0.00%) 238.25
everque 961 ( 0.03%) 62600 ( 0.00%) 65.14
quake 214 ( 0.01%) 35732 ( 0.00%) 166.97
other 100641 ( 3.37%) 56275107 ( 2.81%) 559.17
icmp 42058 ( 1.41%) 7289589 ( 0.36%) 173.32
ipsec 42 ( 0.00%) 6756 ( 0.00%) 160.86
ip6 129 ( 0.00%) 14279 ( 0.00%) 110.69
other 21109 ( 0.71%) 717902 ( 0.04%) 34.01
frag 38670 ( 1.30%) 42760892 ( 2.13%) 1105.79
tcpdump file: 200111291400.dump.gz (79.00 MB)