Traffic Trace Info
DumpFile: 200201011400.dump
FileSize: 199.16MB
Id: 200201011400
StartTime: Tue Jan 1 14:00:00 2002
EndTime: Tue Jan 1 14:06:03 2002
TotalTime: 362.09 seconds
TotalCapSize: 153.48MB CapLen: 96 bytes
# of packets: 2993601 (648.73MB)
AvgRate: 15.03Mbps stddev:1.56M
IP flow (unique src/dst pair) Information
# of flows: 16735 (avg. 178.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.6% 3.2% 2.1% 1.6% 1.3% 1.2% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 14865
Top 10 bandwidth usage (bytes/total in %):
61.4% 20.8% 20.8% 3.2% 3.2% 2.1% 2.1% 1.6% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201011400.pktlen.png)
detailed numbers
[ 16- 31]: 13124
[ 32- 63]: 2515021
[ 64- 127]: 72311
[ 128- 255]: 11198
[ 256- 511]: 7982
[ 512- 1023]: 43731
[ 1024- 2047]: 330234
Protocol Breakdown
![[protocol breakdown chart]](200201011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2993601 (100.00%) 680237530 (100.00%) 227.23
ip 2965166 ( 99.05%) 679356467 ( 99.87%) 229.11
tcp 2900314 ( 96.88%) 656763795 ( 96.55%) 226.45
http(s) 33620 ( 1.12%) 27263440 ( 4.01%) 810.93
http(c) 36715 ( 1.23%) 3175538 ( 0.47%) 86.49
squid 47 ( 0.00%) 6265 ( 0.00%) 133.30
smtp 7445 ( 0.25%) 1200944 ( 0.18%) 161.31
nntp 28 ( 0.00%) 1894 ( 0.00%) 67.64
ftp 21631 ( 0.72%) 2150306 ( 0.32%) 99.41
pop3 801 ( 0.03%) 51108 ( 0.01%) 63.81
telnet 4 ( 0.00%) 240 ( 0.00%) 60.00
ssh 843 ( 0.03%) 57536 ( 0.01%) 68.25
dns 80 ( 0.00%) 6162 ( 0.00%) 77.03
bgp 65 ( 0.00%) 10453 ( 0.00%) 160.82
napster 40858 ( 1.36%) 41103618 ( 6.04%) 1006.01
rtsp 44 ( 0.00%) 4096 ( 0.00%) 93.09
icecast 223 ( 0.01%) 16641 ( 0.00%) 74.62
other 2757590 ( 92.12%) 581703957 ( 85.51%) 210.95
udp 34505 ( 1.15%) 16635970 ( 2.45%) 482.13
dns 18299 ( 0.61%) 1770783 ( 0.26%) 96.77
rip 23 ( 0.00%) 1518 ( 0.00%) 66.00
realaud 3 ( 0.00%) 186 ( 0.00%) 62.00
quake 120 ( 0.00%) 31775 ( 0.00%) 264.79
other 13235 ( 0.44%) 11152769 ( 1.64%) 842.67
icmp 18590 ( 0.62%) 5409291 ( 0.80%) 290.98
ip6 631 ( 0.02%) 156568 ( 0.02%) 248.13
other 11126 ( 0.37%) 390843 ( 0.06%) 35.13
frag 10846 ( 0.36%) 14300460 ( 2.10%) 1318.50
tcpdump file: 200201011400.dump.gz (52.66 MB)