Traffic Trace Info
DumpFile: 200112021400.dump
FileSize: 202.65MB
Id: 200112021400
StartTime: Sun Dec 2 14:00:00 2001
EndTime: Sun Dec 2 14:25:13 2001
TotalTime: 1512.71 seconds
TotalCapSize: 156.94MB CapLen: 96 bytes
# of packets: 2995546 (1690.03MB)
AvgRate: 9.37Mbps stddev:1.83M
IP flow (unique src/dst pair) Information
# of flows: 102335 (avg. 29.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.8% 3.2% 2.5% 2.4% 1.8% 1.6% 1.5% 1.5% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 67340
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.8% 8.7% 7.5% 5.7% 4.1% 3.9% 3.8% 3.5% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112021400.pktlen.png)
detailed numbers
[ 16- 31]: 9859
[ 32- 63]: 1021084
[ 64- 127]: 432252
[ 128- 255]: 147953
[ 256- 511]: 113099
[ 512- 1023]: 332465
[ 1024- 2047]: 938834
Protocol Breakdown
![[protocol breakdown chart]](200112021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2995546 (100.00%) 1772123525 (100.00%) 591.59
ip 2978224 ( 99.42%) 1771594731 ( 99.97%) 594.85
tcp 2616201 ( 87.34%) 1683343385 ( 94.99%) 643.43
http(s) 621816 ( 20.76%) 646275551 ( 36.47%) 1039.34
http(c) 360554 ( 12.04%) 33390351 ( 1.88%) 92.61
squid 68508 ( 2.29%) 56433337 ( 3.18%) 823.75
smtp 86038 ( 2.87%) 34500125 ( 1.95%) 400.99
nntp 31470 ( 1.05%) 5783021 ( 0.33%) 183.76
ftp 41720 ( 1.39%) 20295045 ( 1.15%) 486.46
pop3 2553 ( 0.09%) 327577 ( 0.02%) 128.31
imap 284 ( 0.01%) 32380 ( 0.00%) 114.01
telnet 84 ( 0.00%) 5953 ( 0.00%) 70.87
ssh 14779 ( 0.49%) 12448803 ( 0.70%) 842.33
dns 2807 ( 0.09%) 206259 ( 0.01%) 73.48
bgp 429 ( 0.01%) 102061 ( 0.01%) 237.90
napster 280620 ( 9.37%) 182503343 ( 10.30%) 650.36
realaud 933 ( 0.03%) 772644 ( 0.04%) 828.13
rtsp 504 ( 0.02%) 62824 ( 0.00%) 124.65
icecast 964 ( 0.03%) 491982 ( 0.03%) 510.35
other 1101975 ( 36.79%) 689706237 ( 38.92%) 625.88
udp 256477 ( 8.56%) 51314306 ( 2.90%) 200.07
dns 178719 ( 5.97%) 22755502 ( 1.28%) 127.33
rip 291 ( 0.01%) 29866 ( 0.00%) 102.63
realaud 16232 ( 0.54%) 8601528 ( 0.49%) 529.91
halflif 1508 ( 0.05%) 422375 ( 0.02%) 280.09
everque 5015 ( 0.17%) 329600 ( 0.02%) 65.72
quake 29 ( 0.00%) 2441 ( 0.00%) 84.17
other 54639 ( 1.82%) 19160835 ( 1.08%) 350.68
icmp 84244 ( 2.81%) 16820290 ( 0.95%) 199.66
igmp 14025 ( 0.47%) 19601850 ( 1.11%) 1397.64
ipsec 53 ( 0.00%) 6890 ( 0.00%) 130.00
ip6 1586 ( 0.05%) 316244 ( 0.02%) 199.40
other 5638 ( 0.19%) 191766 ( 0.01%) 34.01
frag 5118 ( 0.17%) 5180207 ( 0.29%) 1012.15
tcpdump file: 200112021400.dump.gz (73.85 MB)