Traffic Trace Info
DumpFile: 200112041400.dump
FileSize: 198.65MB
Id: 200112041400
StartTime: Tue Dec 4 14:00:00 2001
EndTime: Tue Dec 4 14:06:39 2001
TotalTime: 398.20 seconds
TotalCapSize: 153.13MB CapLen: 96 bytes
# of packets: 2983599 (2270.75MB)
AvgRate: 47.84Mbps stddev:8.48M
IP flow (unique src/dst pair) Information
# of flows: 81379 (avg. 36.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
32.4% 2.4% 1.2% 1.1% 1.1% 1.1% 1.0% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 50957
Top 10 bandwidth usage (bytes/total in %):
34.6% 32.5% 3.2% 3.1% 2.8% 2.4% 2.4% 2.3% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112041400.pktlen.png)
detailed numbers
[ 16- 31]: 43861
[ 32- 63]: 802904
[ 64- 127]: 264122
[ 128- 255]: 131737
[ 256- 511]: 125952
[ 512- 1023]: 209523
[ 1024- 2047]: 1405500
Protocol Breakdown
![[protocol breakdown chart]](200112041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2983599 (100.00%) 2381054017 (100.00%) 798.05
ip 2903729 ( 97.32%) 2378609604 ( 99.90%) 819.16
tcp 2726310 ( 91.38%) 2344654782 ( 98.47%) 860.01
http(s) 1421191 ( 47.63%) 1741486571 ( 73.14%) 1225.37
http(c) 320537 ( 10.74%) 33490715 ( 1.41%) 104.48
squid 859 ( 0.03%) 712717 ( 0.03%) 829.71
smtp 57560 ( 1.93%) 13301592 ( 0.56%) 231.09
nntp 15569 ( 0.52%) 4142680 ( 0.17%) 266.09
ftp 73897 ( 2.48%) 51081284 ( 2.15%) 691.25
pop3 4597 ( 0.15%) 1564914 ( 0.07%) 340.42
imap 123 ( 0.00%) 10485 ( 0.00%) 85.24
telnet 297 ( 0.01%) 41480 ( 0.00%) 139.66
ssh 2854 ( 0.10%) 848547 ( 0.04%) 297.32
dns 1127 ( 0.04%) 81087 ( 0.00%) 71.95
bgp 83 ( 0.00%) 14858 ( 0.00%) 179.01
napster 280761 ( 9.41%) 152171918 ( 6.39%) 542.00
realaud 34 ( 0.00%) 3860 ( 0.00%) 113.53
rtsp 4146 ( 0.14%) 3620687 ( 0.15%) 873.30
icecast 27069 ( 0.91%) 28101306 ( 1.18%) 1038.14
hotline 2 ( 0.00%) 140 ( 0.00%) 70.00
other 515239 ( 17.27%) 313966638 ( 13.19%) 609.36
udp 109890 ( 3.68%) 26976746 ( 1.13%) 245.49
dns 73241 ( 2.45%) 11340248 ( 0.48%) 154.83
rip 60 ( 0.00%) 5880 ( 0.00%) 98.00
realaud 4860 ( 0.16%) 2110041 ( 0.09%) 434.16
halflif 357 ( 0.01%) 35864 ( 0.00%) 100.46
everque 4 ( 0.00%) 247 ( 0.00%) 61.75
quake 2 ( 0.00%) 120 ( 0.00%) 60.00
other 31316 ( 1.05%) 13472017 ( 0.57%) 430.20
icmp 40267 ( 1.35%) 5989028 ( 0.25%) 148.73
ipsec 33 ( 0.00%) 5370 ( 0.00%) 162.73
ip6 429 ( 0.01%) 72321 ( 0.00%) 168.58
other 26800 ( 0.90%) 911357 ( 0.04%) 34.01
frag 790 ( 0.03%) 818012 ( 0.03%) 1035.46
tcpdump file: 200112041400.dump.gz (75.62 MB)