Traffic Trace Info
DumpFile: 200112101400.dump
FileSize: 189.23MB
Id: 200112101400
StartTime: Mon Dec 10 14:00:00 2001
EndTime: Mon Dec 10 14:06:03 2001
TotalTime: 362.78 seconds
TotalCapSize: 143.71MB CapLen: 96 bytes
# of packets: 2983044 (2088.54MB)
AvgRate: 48.30Mbps stddev:4.48M
IP flow (unique src/dst pair) Information
# of flows: 108982 (avg. 27.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.0% 0.9% 0.9% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 73602
Top 10 bandwidth usage (bytes/total in %):
40.1% 2.3% 2.3% 1.8% 1.7% 1.6% 1.5% 1.5% 1.4% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112101400.pktlen.png)
detailed numbers
[ 16- 31]: 49530
[ 32- 63]: 645339
[ 64- 127]: 321066
[ 128- 255]: 122803
[ 256- 511]: 110590
[ 512- 1023]: 220752
[ 1024- 2047]: 1512964
Protocol Breakdown
![[protocol breakdown chart]](200112101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2983044 (100.00%) 2189991902 (100.00%) 734.15
ip 2904036 ( 97.35%) 2187600255 ( 99.89%) 753.30
tcp 1821755 ( 61.07%) 1255900563 ( 57.35%) 689.39
http(s) 745485 ( 24.99%) 744954240 ( 34.02%) 999.29
http(c) 267368 ( 8.96%) 25777124 ( 1.18%) 96.41
squid 864 ( 0.03%) 454862 ( 0.02%) 526.46
smtp 42823 ( 1.44%) 12467111 ( 0.57%) 291.13
nntp 45001 ( 1.51%) 29457459 ( 1.35%) 654.60
ftp 9967 ( 0.33%) 6489646 ( 0.30%) 651.11
pop3 3022 ( 0.10%) 274038 ( 0.01%) 90.68
imap 108 ( 0.00%) 8379 ( 0.00%) 77.58
telnet 929 ( 0.03%) 418826 ( 0.02%) 450.84
ssh 12573 ( 0.42%) 5243199 ( 0.24%) 417.02
dns 16959 ( 0.57%) 1236740 ( 0.06%) 72.93
bgp 63 ( 0.00%) 7831 ( 0.00%) 124.30
napster 287552 ( 9.64%) 199172283 ( 9.09%) 692.65
realaud 6 ( 0.00%) 360 ( 0.00%) 60.00
rtsp 16449 ( 0.55%) 12872171 ( 0.59%) 782.55
icecast 112 ( 0.00%) 39573 ( 0.00%) 353.33
hotline 2 ( 0.00%) 263 ( 0.00%) 131.50
other 372107 ( 12.47%) 217013236 ( 9.91%) 583.20
udp 203548 ( 6.82%) 51619430 ( 2.36%) 253.60
dns 133098 ( 4.46%) 16788501 ( 0.77%) 126.14
rip 73 ( 0.00%) 8638 ( 0.00%) 118.33
realaud 2614 ( 0.09%) 870490 ( 0.04%) 333.01
halflif 82 ( 0.00%) 4920 ( 0.00%) 60.00
quake 5 ( 0.00%) 318 ( 0.00%) 63.60
other 67636 ( 2.27%) 33939854 ( 1.55%) 501.80
icmp 854427 ( 28.64%) 878976019 ( 40.14%) 1028.73
ipsec 36 ( 0.00%) 5964 ( 0.00%) 165.67
ip6 1882 ( 0.06%) 336922 ( 0.02%) 179.02
other 22388 ( 0.75%) 761357 ( 0.03%) 34.01
frag 11323 ( 0.38%) 14311668 ( 0.65%) 1263.95
tcpdump file: 200112101400.dump.gz (69.85 MB)