Traffic Trace Info
DumpFile: 200112161400.dump
FileSize: 203.85MB
Id: 200112161400
StartTime: Sun Dec 16 14:00:00 2001
EndTime: Sun Dec 16 14:30:07 2001
TotalTime: 1806.91 seconds
TotalCapSize: 158.08MB CapLen: 96 bytes
# of packets: 2999611 (2051.87MB)
AvgRate: 9.53Mbps stddev:1.85M
IP flow (unique src/dst pair) Information
# of flows: 218527 (avg. 13.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 4.2% 3.9% 3.1% 3.0% 2.5% 2.2% 2.0% 2.0% 1.8%
IP address Information
# of IPv4 addresses: 204356
Top 10 bandwidth usage (bytes/total in %):
14.4% 6.9% 6.6% 5.3% 5.3% 5.2% 4.2% 3.9% 3.9% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112161400.pktlen.png)
detailed numbers
[ 16- 31]: 150
[ 32- 63]: 835958
[ 64- 127]: 414195
[ 128- 255]: 128833
[ 256- 511]: 119715
[ 512- 1023]: 289191
[ 1024- 2047]: 1211569
Protocol Breakdown
![[protocol breakdown chart]](200112161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2999611 (100.00%) 2151544752 (100.00%) 717.27
ip 2999454 ( 99.99%) 2151540163 (100.00%) 717.31
tcp 2767723 ( 92.27%) 2038334871 ( 94.74%) 736.47
http(s) 1223754 ( 40.80%) 1426682616 ( 66.31%) 1165.82
http(c) 252718 ( 8.43%) 18938835 ( 0.88%) 74.94
squid 16283 ( 0.54%) 19144770 ( 0.89%) 1175.75
smtp 31472 ( 1.05%) 13504418 ( 0.63%) 429.09
nntp 275 ( 0.01%) 20480 ( 0.00%) 74.47
ftp 100587 ( 3.35%) 8457738 ( 0.39%) 84.08
pop3 10300 ( 0.34%) 760153 ( 0.04%) 73.80
imap 164 ( 0.01%) 13859 ( 0.00%) 84.51
telnet 937 ( 0.03%) 69349 ( 0.00%) 74.01
ssh 58598 ( 1.95%) 4413025 ( 0.21%) 75.31
dns 694 ( 0.02%) 49923 ( 0.00%) 71.94
bgp 319 ( 0.01%) 43703 ( 0.00%) 137.00
napster 537418 ( 17.92%) 270318625 ( 12.56%) 503.00
realaud 437 ( 0.01%) 64655 ( 0.00%) 147.95
rtsp 144 ( 0.00%) 62781 ( 0.00%) 435.98
icecast 751 ( 0.03%) 71509 ( 0.00%) 95.22
hotline 8 ( 0.00%) 494 ( 0.00%) 61.75
other 532840 ( 17.76%) 275716510 ( 12.81%) 517.45
udp 181285 ( 6.04%) 107761976 ( 5.01%) 594.43
dns 39994 ( 1.33%) 7245584 ( 0.34%) 181.17
realaud 5324 ( 0.18%) 3174221 ( 0.15%) 596.21
halflif 3 ( 0.00%) 180 ( 0.00%) 60.00
everque 4 ( 0.00%) 250 ( 0.00%) 62.50
quake 17 ( 0.00%) 2355 ( 0.00%) 138.53
other 135595 ( 4.52%) 96895855 ( 4.50%) 714.60
icmp 49952 ( 1.67%) 5152632 ( 0.24%) 103.15
ipsec 63 ( 0.00%) 8190 ( 0.00%) 130.00
ip6 405 ( 0.01%) 280954 ( 0.01%) 693.71
other 26 ( 0.00%) 1540 ( 0.00%) 59.23
frag 50014 ( 1.67%) 62967767 ( 2.93%) 1259.00
tcpdump file: 200112161400.dump.gz (72.05 MB)