Traffic Trace Info
DumpFile: 200112131400.dump
FileSize: 200.06MB
Id: 200112131400
StartTime: Thu Dec 13 14:00:00 2001
EndTime: Thu Dec 13 14:08:01 2001
TotalTime: 480.87 seconds
TotalCapSize: 154.47MB CapLen: 96 bytes
# of packets: 2988243 (1947.48MB)
AvgRate: 33.98Mbps stddev:5.96M
IP flow (unique src/dst pair) Information
# of flows: 118743 (avg. 25.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.9% 4.5% 2.6% 2.6% 2.1% 1.4% 1.2% 1.1% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 78554
Top 10 bandwidth usage (bytes/total in %):
15.0% 14.9% 4.7% 4.5% 4.0% 3.5% 2.8% 2.6% 2.6% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112131400.pktlen.png)
detailed numbers
[ 16- 31]: 38302
[ 32- 63]: 885212
[ 64- 127]: 385821
[ 128- 255]: 145482
[ 256- 511]: 126609
[ 512- 1023]: 226091
[ 1024- 2047]: 1180726
Protocol Breakdown
![[protocol breakdown chart]](200112131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2988243 (100.00%) 2042078096 (100.00%) 683.37
ip 2931390 ( 98.10%) 2040368596 ( 99.92%) 696.04
tcp 2582539 ( 86.42%) 1966112249 ( 96.28%) 761.31
http(s) 1082822 ( 36.24%) 1150832433 ( 56.36%) 1062.81
http(c) 364024 ( 12.18%) 37102109 ( 1.82%) 101.92
squid 6738 ( 0.23%) 2478119 ( 0.12%) 367.78
smtp 90834 ( 3.04%) 39043208 ( 1.91%) 429.83
nntp 36575 ( 1.22%) 17983181 ( 0.88%) 491.68
ftp 51929 ( 1.74%) 34974545 ( 1.71%) 673.51
pop3 6513 ( 0.22%) 1206862 ( 0.06%) 185.30
imap 158 ( 0.01%) 13437 ( 0.00%) 85.04
telnet 500 ( 0.02%) 81728 ( 0.00%) 163.46
ssh 3711 ( 0.12%) 919501 ( 0.05%) 247.78
dns 1663 ( 0.06%) 117456 ( 0.01%) 70.63
bgp 101 ( 0.00%) 19367 ( 0.00%) 191.75
napster 478387 ( 16.01%) 404335314 ( 19.80%) 845.21
realaud 44 ( 0.00%) 3772 ( 0.00%) 85.73
rtsp 11897 ( 0.40%) 8353522 ( 0.41%) 702.15
icecast 5522 ( 0.18%) 8009648 ( 0.39%) 1450.50
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 440736 ( 14.75%) 260610037 ( 12.76%) 591.31
udp 274880 ( 9.20%) 65817003 ( 3.22%) 239.44
dns 196576 ( 6.58%) 25108850 ( 1.23%) 127.73
rip 62 ( 0.00%) 6472 ( 0.00%) 104.39
realaud 25396 ( 0.85%) 16547023 ( 0.81%) 651.56
halflif 296 ( 0.01%) 38574 ( 0.00%) 130.32
quake 5 ( 0.00%) 300 ( 0.00%) 60.00
other 50580 ( 1.69%) 23544896 ( 1.15%) 465.50
icmp 53932 ( 1.80%) 7325514 ( 0.36%) 135.83
ipsec 48 ( 0.00%) 7872 ( 0.00%) 164.00
ip6 5903 ( 0.20%) 626823 ( 0.03%) 106.19
other 14088 ( 0.47%) 479135 ( 0.02%) 34.01
frag 13794 ( 0.46%) 13345875 ( 0.65%) 967.51
tcpdump file: 200112131400.dump.gz (77.73 MB)