Traffic Trace Info
DumpFile: 200112291400.dump
FileSize: 201.90MB
Id: 200112291400
StartTime: Sat Dec 29 14:00:00 2001
EndTime: Sat Dec 29 14:23:18 2001
TotalTime: 1397.57 seconds
TotalCapSize: 156.20MB CapLen: 96 bytes
# of packets: 2994561 (2061.83MB)
AvgRate: 12.38Mbps stddev:0.97M
IP flow (unique src/dst pair) Information
# of flows: 65652 (avg. 45.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.2% 2.9% 2.7% 2.1% 2.0% 2.0% 1.9% 1.9% 1.9%
IP address Information
# of IPv4 addresses: 47027
Top 10 bandwidth usage (bytes/total in %):
62.8% 4.3% 4.3% 3.2% 2.9% 2.8% 2.7% 2.1% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200112291400.pktlen.png)
detailed numbers
[ 16- 31]: 9839
[ 32- 63]: 826194
[ 64- 127]: 395302
[ 128- 255]: 77731
[ 256- 511]: 75283
[ 512- 1023]: 377129
[ 1024- 2047]: 1233083
Protocol Breakdown
![[protocol breakdown chart]](200112291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2994561 (100.00%) 2161983210 (100.00%) 721.97
ip 2976416 ( 99.39%) 2161427338 ( 99.97%) 726.18
tcp 2727999 ( 91.10%) 2091616722 ( 96.75%) 766.72
http(s) 410954 ( 13.72%) 395907156 ( 18.31%) 963.39
http(c) 360366 ( 12.03%) 30911702 ( 1.43%) 85.78
squid 16883 ( 0.56%) 6527404 ( 0.30%) 386.63
smtp 78020 ( 2.61%) 25204258 ( 1.17%) 323.05
nntp 100 ( 0.00%) 7528 ( 0.00%) 75.28
ftp 29061 ( 0.97%) 21701180 ( 1.00%) 746.75
pop3 4515 ( 0.15%) 311651 ( 0.01%) 69.03
imap 74 ( 0.00%) 31350 ( 0.00%) 423.65
telnet 43 ( 0.00%) 5820 ( 0.00%) 135.35
ssh 6259 ( 0.21%) 950652 ( 0.04%) 151.89
dns 875 ( 0.03%) 60750 ( 0.00%) 69.43
bgp 262 ( 0.01%) 42004 ( 0.00%) 160.32
napster 248591 ( 8.30%) 124475899 ( 5.76%) 500.73
realaud 7388 ( 0.25%) 3612270 ( 0.17%) 488.94
rtsp 41026 ( 1.37%) 2521656 ( 0.12%) 61.46
icecast 408 ( 0.01%) 53250 ( 0.00%) 130.51
hotline 41 ( 0.00%) 6137 ( 0.00%) 149.68
other 1522925 ( 50.86%) 1479278357 ( 68.42%) 971.34
udp 155807 ( 5.20%) 23120018 ( 1.07%) 148.39
dns 94240 ( 3.15%) 9391464 ( 0.43%) 99.65
rip 93 ( 0.00%) 6138 ( 0.00%) 66.00
realaud 1225 ( 0.04%) 428770 ( 0.02%) 350.02
halflif 68 ( 0.00%) 4080 ( 0.00%) 60.00
everque 3 ( 0.00%) 243 ( 0.00%) 81.00
quake 638 ( 0.02%) 112394 ( 0.01%) 176.17
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 59534 ( 1.99%) 13176560 ( 0.61%) 221.33
icmp 80902 ( 2.70%) 45456143 ( 2.10%) 561.87
ipsec 104 ( 0.00%) 14152 ( 0.00%) 136.08
ip6 4426 ( 0.15%) 915845 ( 0.04%) 206.92
other 7178 ( 0.24%) 304458 ( 0.01%) 42.42
frag 20 ( 0.00%) 11311 ( 0.00%) 565.55
tcpdump file: 200112291400.dump.gz (70.94 MB)