Traffic Trace Info
DumpFile: 200201071400.dump
FileSize: 203.09MB
Id: 200201071400
StartTime: Mon Jan 7 14:00:01 2002
EndTime: Mon Jan 7 14:12:00 2002
TotalTime: 719.68 seconds
TotalCapSize: 157.35MB CapLen: 96 bytes
# of packets: 2997647 (2152.57MB)
AvgRate: 25.09Mbps stddev:4.41M
IP flow (unique src/dst pair) Information
# of flows: 57651 (avg. 52.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.2% 3.2% 3.1% 2.7% 2.5% 2.1% 2.0% 1.9% 1.7%
IP address Information
# of IPv4 addresses: 44458
Top 10 bandwidth usage (bytes/total in %):
7.3% 6.1% 5.2% 4.3% 4.2% 4.2% 3.8% 3.6% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201071400.pktlen.png)
detailed numbers
[ 16- 31]: 15601
[ 32- 63]: 798979
[ 64- 127]: 266444
[ 128- 255]: 176895
[ 256- 511]: 87993
[ 512- 1023]: 386191
[ 1024- 2047]: 1265544
Protocol Breakdown
![[protocol breakdown chart]](200201071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2997647 (100.00%) 2257132528 (100.00%) 752.97
ip 2977563 ( 99.33%) 2256537724 ( 99.97%) 757.85
tcp 2754050 ( 91.87%) 2148815000 ( 95.20%) 780.24
http(s) 1344718 ( 44.86%) 1428123615 ( 63.27%) 1062.02
http(c) 211104 ( 7.04%) 18163672 ( 0.80%) 86.04
squid 2782 ( 0.09%) 3577673 ( 0.16%) 1286.01
smtp 38225 ( 1.28%) 14771142 ( 0.65%) 386.43
nntp 174 ( 0.01%) 14494 ( 0.00%) 83.30
ftp 18354 ( 0.61%) 12006653 ( 0.53%) 654.17
pop3 7402 ( 0.25%) 957449 ( 0.04%) 129.35
imap 82 ( 0.00%) 6929 ( 0.00%) 84.50
telnet 557 ( 0.02%) 63256 ( 0.00%) 113.57
ssh 1494 ( 0.05%) 160363 ( 0.01%) 107.34
dns 777 ( 0.03%) 53329 ( 0.00%) 68.63
bgp 136 ( 0.00%) 22664 ( 0.00%) 166.65
napster 297250 ( 9.92%) 233655929 ( 10.35%) 786.06
rtsp 12311 ( 0.41%) 2846954 ( 0.13%) 231.25
icecast 2527 ( 0.08%) 2004622 ( 0.09%) 793.28
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 816032 ( 27.22%) 432381136 ( 19.16%) 529.86
udp 153181 ( 5.11%) 102494646 ( 4.54%) 669.11
dns 58876 ( 1.96%) 6571652 ( 0.29%) 111.62
rip 48 ( 0.00%) 3168 ( 0.00%) 66.00
realaud 2518 ( 0.08%) 898287 ( 0.04%) 356.75
halflif 39 ( 0.00%) 2340 ( 0.00%) 60.00
quake 3 ( 0.00%) 180 ( 0.00%) 60.00
cuseeme 1 ( 0.00%) 74 ( 0.00%) 74.00
other 91181 ( 3.04%) 94282378 ( 4.18%) 1034.01
icmp 65338 ( 2.18%) 4756965 ( 0.21%) 72.81
ipsec 33 ( 0.00%) 6086 ( 0.00%) 184.42
ip6 1248 ( 0.04%) 314798 ( 0.01%) 252.24
other 3713 ( 0.12%) 150229 ( 0.01%) 40.46
frag 57944 ( 1.93%) 85185164 ( 3.77%) 1470.13
tcpdump file: 200201071400.dump.gz (70.46 MB)