Traffic Trace Info
DumpFile: 200112281400.dump
FileSize: 202.06MB
Id: 200112281400
StartTime: Fri Dec 28 14:00:00 2001
EndTime: Fri Dec 28 14:23:04 2001
TotalTime: 1384.16 seconds
TotalCapSize: 156.35MB CapLen: 96 bytes
# of packets: 2995123 (2123.20MB)
AvgRate: 12.87Mbps stddev:3.75M
IP flow (unique src/dst pair) Information
# of flows: 151557 (avg. 19.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.5% 2.3% 2.3% 2.2% 2.2% 2.1% 2.1% 2.0% 1.8%
IP address Information
# of IPv4 addresses: 129538
Top 10 bandwidth usage (bytes/total in %):
36.7% 3.8% 3.8% 3.7% 3.3% 2.8% 2.7% 2.5% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112281400.pktlen.png)
detailed numbers
[ 16- 31]: 10860
[ 32- 63]: 910769
[ 64- 127]: 313881
[ 128- 255]: 69862
[ 256- 511]: 79726
[ 512- 1023]: 345296
[ 1024- 2047]: 1264729
Protocol Breakdown
![[protocol breakdown chart]](200112281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2995123 (100.00%) 2226334605 (100.00%) 743.32
ip 2979711 ( 99.49%) 2225873205 ( 99.98%) 747.01
tcp 2748980 ( 91.78%) 2149458110 ( 96.55%) 781.91
http(s) 855483 ( 28.56%) 853082887 ( 38.32%) 997.19
http(c) 213450 ( 7.13%) 19789584 ( 0.89%) 92.71
squid 1921 ( 0.06%) 1531219 ( 0.07%) 797.09
smtp 61430 ( 2.05%) 9467104 ( 0.43%) 154.11
nntp 1124 ( 0.04%) 96167 ( 0.00%) 85.56
ftp 89592 ( 2.99%) 5400346 ( 0.24%) 60.28
pop3 3750 ( 0.13%) 383334 ( 0.02%) 102.22
imap 301 ( 0.01%) 104346 ( 0.00%) 346.66
telnet 910 ( 0.03%) 175779 ( 0.01%) 193.16
ssh 7834 ( 0.26%) 992547 ( 0.04%) 126.70
dns 691 ( 0.02%) 43224 ( 0.00%) 62.55
bgp 281 ( 0.01%) 50637 ( 0.00%) 180.20
napster 284742 ( 9.51%) 179419202 ( 8.06%) 630.11
realaud 23 ( 0.00%) 1380 ( 0.00%) 60.00
rtsp 204 ( 0.01%) 42299 ( 0.00%) 207.35
icecast 712 ( 0.02%) 434020 ( 0.02%) 609.58
other 1226383 ( 40.95%) 1078438641 ( 48.44%) 879.37
udp 172684 ( 5.77%) 66739807 ( 3.00%) 386.49
dns 90776 ( 3.03%) 9339624 ( 0.42%) 102.89
realaud 2507 ( 0.08%) 162505 ( 0.01%) 64.82
everque 1 ( 0.00%) 78 ( 0.00%) 78.00
quake 488 ( 0.02%) 79812 ( 0.00%) 163.55
other 78798 ( 2.63%) 57015883 ( 2.56%) 723.57
icmp 51157 ( 1.71%) 8790303 ( 0.39%) 171.83
ip6 2599 ( 0.09%) 691338 ( 0.03%) 266.00
other 4291 ( 0.14%) 193647 ( 0.01%) 45.13
frag 32513 ( 1.09%) 47947596 ( 2.15%) 1474.72
tcpdump file: 200112281400.dump.gz (67.93 MB)