Traffic Trace Info
DumpFile: 200201081400.dump
FileSize: 199.62MB
Id: 200201081400
StartTime: Tue Jan 8 14:00:01 2002
EndTime: Tue Jan 8 14:12:23 2002
TotalTime: 742.75 seconds
TotalCapSize: 153.87MB CapLen: 96 bytes
# of packets: 2998189 (2167.19MB)
AvgRate: 24.48Mbps stddev:3.51M
IP flow (unique src/dst pair) Information
# of flows: 64787 (avg. 46.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.6% 7.6% 3.5% 2.9% 2.0% 1.8% 1.8% 1.7% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 49935
Top 10 bandwidth usage (bytes/total in %):
16.1% 15.6% 8.1% 7.6% 4.9% 4.4% 2.9% 2.9% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201081400.pktlen.png)
detailed numbers
[ 16- 31]: 11183
[ 32- 63]: 821725
[ 64- 127]: 310817
[ 128- 255]: 116631
[ 256- 511]: 133298
[ 512- 1023]: 245721
[ 1024- 2047]: 1358814
Protocol Breakdown
![[protocol breakdown chart]](200201081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2998189 (100.00%) 2272461311 (100.00%) 757.94
ip 2984731 ( 99.55%) 2272065685 ( 99.98%) 761.23
tcp 2626619 ( 87.61%) 2089629141 ( 91.95%) 795.56
http(s) 970695 ( 32.38%) 918113451 ( 40.40%) 945.83
http(c) 221078 ( 7.37%) 21396374 ( 0.94%) 96.78
squid 8086 ( 0.27%) 3614547 ( 0.16%) 447.01
smtp 66508 ( 2.22%) 14146950 ( 0.62%) 212.71
nntp 267 ( 0.01%) 61671 ( 0.00%) 230.98
ftp 55889 ( 1.86%) 12882538 ( 0.57%) 230.50
pop3 6565 ( 0.22%) 1070620 ( 0.05%) 163.08
imap 172 ( 0.01%) 34499 ( 0.00%) 200.58
telnet 1336 ( 0.04%) 199772 ( 0.01%) 149.53
ssh 2502 ( 0.08%) 203404 ( 0.01%) 81.30
dns 860 ( 0.03%) 55480 ( 0.00%) 64.51
bgp 146 ( 0.00%) 24929 ( 0.00%) 170.75
napster 369211 ( 12.31%) 254903020 ( 11.22%) 690.40
realaud 208 ( 0.01%) 139240 ( 0.01%) 669.42
rtsp 3737 ( 0.12%) 2003712 ( 0.09%) 536.18
icecast 4616 ( 0.15%) 2722509 ( 0.12%) 589.80
other 914656 ( 30.51%) 858053210 ( 37.76%) 938.12
udp 324231 ( 10.81%) 179142377 ( 7.88%) 552.51
dns 71684 ( 2.39%) 8177250 ( 0.36%) 114.07
rip 50 ( 0.00%) 3300 ( 0.00%) 66.00
realaud 50674 ( 1.69%) 37493541 ( 1.65%) 739.90
halflif 25 ( 0.00%) 1500 ( 0.00%) 60.00
everque 20 ( 0.00%) 5486 ( 0.00%) 274.30
other 201420 ( 6.72%) 132983041 ( 5.85%) 660.23
icmp 30303 ( 1.01%) 2849943 ( 0.13%) 94.05
ipsec 41 ( 0.00%) 7558 ( 0.00%) 184.34
ip6 1327 ( 0.04%) 336468 ( 0.01%) 253.56
other 2210 ( 0.07%) 100198 ( 0.00%) 45.34
frag 53364 ( 1.78%) 67334197 ( 2.96%) 1261.79
tcpdump file: 200201081400.dump.gz (71.07 MB)