Traffic Trace Info
DumpFile: 200112221400.dump
FileSize: 196.14MB
Id: 200112221400
StartTime: Sat Dec 22 14:00:00 2001
EndTime: Sat Dec 22 14:20:56 2001
TotalTime: 1255.74 seconds
TotalCapSize: 150.38MB CapLen: 96 bytes
# of packets: 2998650 (1805.58MB)
AvgRate: 12.06Mbps stddev:2.17M
IP flow (unique src/dst pair) Information
# of flows: 105716 (avg. 28.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.5% 10.5% 3.8% 3.6% 3.2% 2.8% 2.6% 2.0% 2.0% 1.7%
IP address Information
# of IPv4 addresses: 82134
Top 10 bandwidth usage (bytes/total in %):
13.6% 13.1% 10.9% 10.5% 4.3% 3.8% 3.6% 3.6% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112221400.pktlen.png)
detailed numbers
[ 16- 31]: 5405
[ 32- 63]: 837094
[ 64- 127]: 651328
[ 128- 255]: 141828
[ 256- 511]: 103397
[ 512- 1023]: 171232
[ 1024- 2047]: 1088366
Protocol Breakdown
![[protocol breakdown chart]](200112221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2998650 (100.00%) 1893284032 (100.00%) 631.38
ip 2991932 ( 99.78%) 1893085851 ( 99.99%) 632.73
tcp 2349246 ( 78.34%) 1753739387 ( 92.63%) 746.51
http(s) 743583 ( 24.80%) 834807984 ( 44.09%) 1122.68
http(c) 250937 ( 8.37%) 23782612 ( 1.26%) 94.78
squid 12604 ( 0.42%) 6644950 ( 0.35%) 527.21
smtp 44908 ( 1.50%) 17371040 ( 0.92%) 386.81
nntp 80 ( 0.00%) 6120 ( 0.00%) 76.50
ftp 14775 ( 0.49%) 4117041 ( 0.22%) 278.65
pop3 9495 ( 0.32%) 7989745 ( 0.42%) 841.47
imap 142 ( 0.00%) 12720 ( 0.00%) 89.58
telnet 19 ( 0.00%) 1674 ( 0.00%) 88.11
ssh 6781 ( 0.23%) 767036 ( 0.04%) 113.12
dns 832 ( 0.03%) 59544 ( 0.00%) 71.57
bgp 237 ( 0.01%) 35403 ( 0.00%) 149.38
napster 680974 ( 22.71%) 547211231 ( 28.90%) 803.57
realaud 29 ( 0.00%) 2174 ( 0.00%) 74.97
rtsp 25545 ( 0.85%) 4845420 ( 0.26%) 189.68
icecast 249 ( 0.01%) 30007 ( 0.00%) 120.51
hotline 10 ( 0.00%) 1315 ( 0.00%) 131.50
other 557978 ( 18.61%) 306050908 ( 16.17%) 548.50
udp 602986 ( 20.11%) 135435592 ( 7.15%) 224.61
dns 80818 ( 2.70%) 8703316 ( 0.46%) 107.69
rip 81 ( 0.00%) 5346 ( 0.00%) 66.00
realaud 10805 ( 0.36%) 6286768 ( 0.33%) 581.84
halflif 184 ( 0.01%) 11607 ( 0.00%) 63.08
starcra 3 ( 0.00%) 208 ( 0.00%) 69.33
everque 5 ( 0.00%) 308 ( 0.00%) 61.60
quake 3750 ( 0.13%) 593691 ( 0.03%) 158.32
other 507091 ( 16.91%) 119749653 ( 6.32%) 236.15
icmp 36214 ( 1.21%) 3279599 ( 0.17%) 90.56
ipsec 76 ( 0.00%) 10072 ( 0.00%) 132.53
ip6 1790 ( 0.06%) 531205 ( 0.03%) 296.76
other 1620 ( 0.05%) 89996 ( 0.00%) 55.55
frag 47669 ( 1.59%) 58943505 ( 3.11%) 1236.52
tcpdump file: 200112221400.dump.gz (61.25 MB)