Traffic Trace Info
DumpFile: 200112171400.dump
FileSize: 198.17MB
Id: 200112171400
StartTime: Mon Dec 17 14:00:00 2001
EndTime: Mon Dec 17 14:07:28 2001
TotalTime: 448.22 seconds
TotalCapSize: 152.60MB CapLen: 96 bytes
# of packets: 2986762 (1992.02MB)
AvgRate: 37.29Mbps stddev:3.24M
IP flow (unique src/dst pair) Information
# of flows: 79236 (avg. 37.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.0% 1.7% 1.6% 1.6% 1.4% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 60391
Top 10 bandwidth usage (bytes/total in %):
5.2% 3.8% 3.7% 3.6% 3.4% 3.0% 2.7% 2.3% 2.3% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112171400.pktlen.png)
detailed numbers
[ 16- 31]: 45488
[ 32- 63]: 861714
[ 64- 127]: 280204
[ 128- 255]: 150712
[ 256- 511]: 131856
[ 512- 1023]: 370100
[ 1024- 2047]: 1146688
Protocol Breakdown
![[protocol breakdown chart]](200112171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2986762 (100.00%) 2088781058 (100.00%) 699.35
ip 2916488 ( 97.65%) 2086660117 ( 99.90%) 715.47
tcp 2639253 ( 88.37%) 1975360212 ( 94.57%) 748.45
http(s) 863548 ( 28.91%) 895860926 ( 42.89%) 1037.42
http(c) 299121 ( 10.01%) 31150103 ( 1.49%) 104.14
squid 65135 ( 2.18%) 88858593 ( 4.25%) 1364.22
smtp 69508 ( 2.33%) 44590312 ( 2.13%) 641.51
nntp 30574 ( 1.02%) 14269645 ( 0.68%) 466.72
ftp 7419 ( 0.25%) 1716567 ( 0.08%) 231.37
pop3 5602 ( 0.19%) 1563652 ( 0.07%) 279.12
imap 228 ( 0.01%) 17393 ( 0.00%) 76.29
telnet 228 ( 0.01%) 39473 ( 0.00%) 173.13
ssh 2353 ( 0.08%) 484489 ( 0.02%) 205.90
dns 1246 ( 0.04%) 82388 ( 0.00%) 66.12
bgp 80 ( 0.00%) 11369 ( 0.00%) 142.11
napster 549528 ( 18.40%) 416861582 ( 19.96%) 758.58
realaud 16 ( 0.00%) 960 ( 0.00%) 60.00
rtsp 16852 ( 0.56%) 13519848 ( 0.65%) 802.27
icecast 528 ( 0.02%) 434379 ( 0.02%) 822.69
hotline 4 ( 0.00%) 526 ( 0.00%) 131.50
other 726996 ( 24.34%) 465887624 ( 22.30%) 640.84
udp 133105 ( 4.46%) 39927934 ( 1.91%) 299.97
dns 69468 ( 2.33%) 10648234 ( 0.51%) 153.28
rip 76 ( 0.00%) 8316 ( 0.00%) 109.42
realaud 7687 ( 0.26%) 3951111 ( 0.19%) 514.00
halflif 10630 ( 0.36%) 1760695 ( 0.08%) 165.63
quake 5 ( 0.00%) 611 ( 0.00%) 122.20
other 43027 ( 1.44%) 21965996 ( 1.05%) 510.52
icmp 125188 ( 4.19%) 70612050 ( 3.38%) 564.05
ipsec 15 ( 0.00%) 1950 ( 0.00%) 130.00
ip6 425 ( 0.01%) 128772 ( 0.01%) 302.99
other 18502 ( 0.62%) 629199 ( 0.03%) 34.01
frag 10179 ( 0.34%) 12511530 ( 0.60%) 1229.15
tcpdump file: 200112171400.dump.gz (76.80 MB)