Traffic Trace Info
DumpFile: 200112201400.dump
FileSize: 202.88MB
Id: 200112201400
StartTime: Thu Dec 20 14:00:00 2001
EndTime: Thu Dec 20 14:22:06 2001
TotalTime: 1325.50 seconds
TotalCapSize: 157.13MB CapLen: 96 bytes
# of packets: 2998432 (1943.10MB)
AvgRate: 12.30Mbps stddev:5.08M
IP flow (unique src/dst pair) Information
# of flows: 120677 (avg. 24.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.8% 1.8% 1.6% 1.4% 1.4% 1.4% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 78645
Top 10 bandwidth usage (bytes/total in %):
6.7% 5.3% 4.8% 4.8% 4.0% 3.4% 3.3% 3.1% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112201400.pktlen.png)
detailed numbers
[ 16- 31]: 5980
[ 32- 63]: 885018
[ 64- 127]: 371461
[ 128- 255]: 131509
[ 256- 511]: 168214
[ 512- 1023]: 298979
[ 1024- 2047]: 1137271
Protocol Breakdown
![[protocol breakdown chart]](200112201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2998432 (100.00%) 2037488508 (100.00%) 679.52
ip 2990144 ( 99.72%) 2037240956 ( 99.99%) 681.32
tcp 2742162 ( 91.45%) 1970875624 ( 96.73%) 718.73
http(s) 1179019 ( 39.32%) 1167246853 ( 57.29%) 990.02
http(c) 245655 ( 8.19%) 26979722 ( 1.32%) 109.83
squid 18584 ( 0.62%) 12177590 ( 0.60%) 655.27
smtp 49703 ( 1.66%) 17567406 ( 0.86%) 353.45
nntp 438 ( 0.01%) 30281 ( 0.00%) 69.13
ftp 27292 ( 0.91%) 2854357 ( 0.14%) 104.59
pop3 5901 ( 0.20%) 685021 ( 0.03%) 116.09
imap 626 ( 0.02%) 55333 ( 0.00%) 88.39
telnet 239 ( 0.01%) 59970 ( 0.00%) 250.92
ssh 24842 ( 0.83%) 1747781 ( 0.09%) 70.36
dns 1766 ( 0.06%) 114573 ( 0.01%) 64.88
bgp 306 ( 0.01%) 68978 ( 0.00%) 225.42
napster 394817 ( 13.17%) 341872936 ( 16.78%) 865.90
realaud 96 ( 0.00%) 6754 ( 0.00%) 70.35
rtsp 2518 ( 0.08%) 955756 ( 0.05%) 379.57
icecast 1057 ( 0.04%) 463530 ( 0.02%) 438.53
hotline 10 ( 0.00%) 1315 ( 0.00%) 131.50
other 789208 ( 26.32%) 397984367 ( 19.53%) 504.28
udp 194301 ( 6.48%) 61260744 ( 3.01%) 315.29
dns 94937 ( 3.17%) 13581785 ( 0.67%) 143.06
rip 116 ( 0.00%) 13236 ( 0.00%) 114.10
realaud 35871 ( 1.20%) 13079516 ( 0.64%) 364.63
quake 433 ( 0.01%) 76407 ( 0.00%) 176.46
other 57047 ( 1.90%) 30828196 ( 1.51%) 540.40
icmp 51338 ( 1.71%) 4656739 ( 0.23%) 90.71
ip6 596 ( 0.02%) 381982 ( 0.02%) 640.91
other 1747 ( 0.06%) 65867 ( 0.00%) 37.70
frag 22466 ( 0.75%) 25013067 ( 1.23%) 1113.37
tcpdump file: 200112201400.dump.gz (75.89 MB)