Traffic Trace Info
DumpFile: 200112241400.dump
FileSize: 201.97MB
Id: 200112241400
StartTime: Mon Dec 24 14:00:00 2001
EndTime: Mon Dec 24 14:23:05 2001
TotalTime: 1385.05 seconds
TotalCapSize: 156.23MB CapLen: 96 bytes
# of packets: 2997398 (1751.90MB)
AvgRate: 10.61Mbps stddev:1.46M
IP flow (unique src/dst pair) Information
# of flows: 69564 (avg. 43.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 5.1% 4.8% 4.7% 3.2% 3.0% 2.9% 2.5% 2.3% 2.3%
IP address Information
# of IPv4 addresses: 51947
Top 10 bandwidth usage (bytes/total in %):
19.9% 8.3% 6.5% 5.8% 5.8% 5.4% 5.1% 4.8% 4.7% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112241400.pktlen.png)
detailed numbers
[ 16- 31]: 5593
[ 32- 63]: 1145168
[ 64- 127]: 393799
[ 128- 255]: 66274
[ 256- 511]: 77310
[ 512- 1023]: 279206
[ 1024- 2047]: 1030048
Protocol Breakdown
![[protocol breakdown chart]](200112241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2997398 (100.00%) 1837001834 (100.00%) 612.87
ip 2989994 ( 99.75%) 1836781742 ( 99.99%) 614.31
tcp 2728560 ( 91.03%) 1795179829 ( 97.72%) 657.92
http(s) 509142 ( 16.99%) 527390278 ( 28.71%) 1035.84
http(c) 263709 ( 8.80%) 21785221 ( 1.19%) 82.61
squid 48624 ( 1.62%) 58229555 ( 3.17%) 1197.55
smtp 29475 ( 0.98%) 13202966 ( 0.72%) 447.94
nntp 26 ( 0.00%) 1560 ( 0.00%) 60.00
ftp 49081 ( 1.64%) 30706437 ( 1.67%) 625.63
pop3 4175 ( 0.14%) 389444 ( 0.02%) 93.28
imap 569 ( 0.02%) 40170 ( 0.00%) 70.60
telnet 17 ( 0.00%) 1219 ( 0.00%) 71.71
ssh 13450 ( 0.45%) 843476 ( 0.05%) 62.71
dns 838 ( 0.03%) 57900 ( 0.00%) 69.09
bgp 247 ( 0.01%) 32697 ( 0.00%) 132.38
napster 745041 ( 24.86%) 498901117 ( 27.16%) 669.63
rtsp 40050 ( 1.34%) 2477169 ( 0.13%) 61.85
icecast 295 ( 0.01%) 44301 ( 0.00%) 150.17
hotline 56843 ( 1.90%) 85880551 ( 4.68%) 1510.84
other 966882 ( 32.26%) 555192297 ( 30.22%) 574.21
udp 200134 ( 6.68%) 34705971 ( 1.89%) 173.41
dns 84281 ( 2.81%) 8407652 ( 0.46%) 99.76
rip 93 ( 0.00%) 6138 ( 0.00%) 66.00
realaud 1083 ( 0.04%) 155406 ( 0.01%) 143.50
everque 1 ( 0.00%) 60 ( 0.00%) 60.00
quake 737 ( 0.02%) 134316 ( 0.01%) 182.25
cuseeme 132 ( 0.00%) 15240 ( 0.00%) 115.45
other 113802 ( 3.80%) 25986979 ( 1.41%) 228.35
icmp 42983 ( 1.43%) 4250587 ( 0.23%) 98.89
ipsec 12995 ( 0.43%) 1654850 ( 0.09%) 127.35
ip6 3199 ( 0.11%) 878964 ( 0.05%) 274.76
other 2123 ( 0.07%) 111541 ( 0.01%) 52.54
tcpdump file: 200112241400.dump.gz (67.92 MB)