Traffic Trace Info
DumpFile: 200201031400.dump
FileSize: 202.11MB
Id: 200201031400
StartTime: Thu Jan 3 14:00:00 2002
EndTime: Thu Jan 3 14:45:38 2002
TotalTime: 2737.77 seconds
TotalCapSize: 156.37MB CapLen: 96 bytes
# of packets: 2997286 (1367.26MB)
AvgRate: 4.19Mbps stddev:1.04M
IP flow (unique src/dst pair) Information
# of flows: 124469 (avg. 24.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.8% 7.2% 3.6% 3.1% 3.0% 2.1% 2.0% 1.9% 1.8% 1.6%
IP address Information
# of IPv4 addresses: 91789
Top 10 bandwidth usage (bytes/total in %):
12.6% 12.1% 7.3% 7.3% 7.3% 5.5% 5.1% 5.0% 4.3% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201031400.pktlen.png)
detailed numbers
[ 16- 31]: 3739
[ 32- 63]: 1106862
[ 64- 127]: 567092
[ 128- 255]: 155163
[ 256- 511]: 152400
[ 512- 1023]: 311034
[ 1024- 2047]: 700996
Protocol Breakdown
![[protocol breakdown chart]](200201031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2997286 (100.00%) 1433671259 (100.00%) 478.32
ip 2990911 ( 99.79%) 1433477132 ( 99.99%) 479.28
tcp 2566104 ( 85.61%) 1343986616 ( 93.74%) 523.75
http(s) 660019 ( 22.02%) 606854399 ( 42.33%) 919.45
http(c) 337013 ( 11.24%) 30745782 ( 2.14%) 91.23
squid 90043 ( 3.00%) 32900411 ( 2.29%) 365.39
smtp 117126 ( 3.91%) 36343305 ( 2.53%) 310.29
nntp 217 ( 0.01%) 19900 ( 0.00%) 91.71
ftp 117981 ( 3.94%) 16583243 ( 1.16%) 140.56
pop3 9588 ( 0.32%) 3479563 ( 0.24%) 362.91
imap 34 ( 0.00%) 2480 ( 0.00%) 72.94
telnet 1817 ( 0.06%) 1075562 ( 0.08%) 591.94
ssh 14891 ( 0.50%) 2086458 ( 0.15%) 140.12
dns 1378 ( 0.05%) 90946 ( 0.01%) 66.00
bgp 515 ( 0.02%) 81926 ( 0.01%) 159.08
napster 139578 ( 4.66%) 93651938 ( 6.53%) 670.96
realaud 75 ( 0.00%) 6466 ( 0.00%) 86.21
rtsp 67868 ( 2.26%) 4228998 ( 0.29%) 62.31
icecast 667 ( 0.02%) 58544 ( 0.00%) 87.77
hotline 316116 ( 10.55%) 181269617 ( 12.64%) 573.43
other 691077 ( 23.06%) 334503233 ( 23.33%) 484.03
udp 299708 ( 10.00%) 61236107 ( 4.27%) 204.32
dns 156314 ( 5.22%) 15725642 ( 1.10%) 100.60
rip 178 ( 0.01%) 11748 ( 0.00%) 66.00
realaud 4857 ( 0.16%) 1655730 ( 0.12%) 340.90
halflif 107 ( 0.00%) 6420 ( 0.00%) 60.00
everque 1 ( 0.00%) 78 ( 0.00%) 78.00
quake 65005 ( 2.17%) 21708357 ( 1.51%) 333.95
other 73241 ( 2.44%) 22127948 ( 1.54%) 302.13
icmp 116870 ( 3.90%) 26843043 ( 1.87%) 229.68
ip6 4650 ( 0.16%) 1196713 ( 0.08%) 257.36
other 3579 ( 0.12%) 214653 ( 0.01%) 59.98
frag 10888 ( 0.36%) 9702666 ( 0.68%) 891.13
tcpdump file: 200201031400.dump.gz (72.16 MB)