Traffic Trace Info
DumpFile: 200112181400.dump
FileSize: 200.81MB
Id: 200112181400
StartTime: Tue Dec 18 14:00:00 2001
EndTime: Tue Dec 18 14:15:54 2001
TotalTime: 953.24 seconds
TotalCapSize: 155.05MB CapLen: 96 bytes
# of packets: 2998909 (2473.86MB)
AvgRate: 21.77Mbps stddev:4.24M
IP flow (unique src/dst pair) Information
# of flows: 63531 (avg. 47.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.2% 3.0% 2.5% 2.1% 2.1% 2.0% 1.9% 1.9% 1.8%
IP address Information
# of IPv4 addresses: 51871
Top 10 bandwidth usage (bytes/total in %):
5.7% 5.4% 4.6% 4.2% 3.6% 3.6% 3.3% 3.3% 3.2% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112181400.pktlen.png)
detailed numbers
[ 16- 31]: 5203
[ 32- 63]: 700810
[ 64- 127]: 199135
[ 128- 255]: 110223
[ 256- 511]: 124102
[ 512- 1023]: 325885
[ 1024- 2047]: 1533551
Protocol Breakdown
![[protocol breakdown chart]](200112181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2998909 (100.00%) 2594033927 (100.00%) 864.99
ip 2992934 ( 99.80%) 2593859276 ( 99.99%) 866.66
tcp 2791871 ( 93.10%) 2517774992 ( 97.06%) 901.82
http(s) 1381003 ( 46.05%) 1459880364 ( 56.28%) 1057.12
http(c) 204919 ( 6.83%) 16695337 ( 0.64%) 81.47
squid 54726 ( 1.82%) 74566518 ( 2.87%) 1362.54
smtp 24543 ( 0.82%) 9349721 ( 0.36%) 380.95
nntp 613 ( 0.02%) 72298 ( 0.00%) 117.94
ftp 14237 ( 0.47%) 10011625 ( 0.39%) 703.21
pop3 4019 ( 0.13%) 1027444 ( 0.04%) 255.65
imap 251 ( 0.01%) 18699 ( 0.00%) 74.50
telnet 815 ( 0.03%) 648771 ( 0.03%) 796.04
ssh 12139 ( 0.40%) 2794698 ( 0.11%) 230.22
dns 786 ( 0.03%) 56669 ( 0.00%) 72.10
bgp 238 ( 0.01%) 62464 ( 0.00%) 262.45
napster 621683 ( 20.73%) 534600089 ( 20.61%) 859.92
rtsp 3276 ( 0.11%) 294485 ( 0.01%) 89.89
icecast 8230 ( 0.27%) 901557 ( 0.03%) 109.55
hotline 12 ( 0.00%) 1292 ( 0.00%) 107.67
other 460332 ( 15.35%) 406791099 ( 15.68%) 883.69
udp 172766 ( 5.76%) 73633175 ( 2.84%) 426.20
dns 36564 ( 1.22%) 5998601 ( 0.23%) 164.06
realaud 57627 ( 1.92%) 35188115 ( 1.36%) 610.62
quake 413 ( 0.01%) 65973 ( 0.00%) 159.74
other 77889 ( 2.60%) 32330981 ( 1.25%) 415.09
icmp 27282 ( 0.91%) 2248865 ( 0.09%) 82.43
ipsec 171 ( 0.01%) 25586 ( 0.00%) 149.63
ip6 310 ( 0.01%) 158476 ( 0.01%) 511.21
other 534 ( 0.02%) 18182 ( 0.00%) 34.05
frag 17264 ( 0.58%) 14887616 ( 0.57%) 862.35
tcpdump file: 200112181400.dump.gz (70.63 MB)