Traffic Trace Info
DumpFile: 200201091400.dump
FileSize: 202.11MB
Id: 200201091400
StartTime: Wed Jan 9 14:00:00 2002
EndTime: Wed Jan 9 14:18:28 2002
TotalTime: 1107.42 seconds
TotalCapSize: 156.35MB CapLen: 96 bytes
# of packets: 2998624 (1843.22MB)
AvgRate: 13.96Mbps stddev:2.26M
IP flow (unique src/dst pair) Information
# of flows: 85559 (avg. 35.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.0% 2.9% 2.4% 1.7% 1.5% 1.4% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 62469
Top 10 bandwidth usage (bytes/total in %):
7.6% 4.4% 4.1% 3.4% 3.0% 3.0% 3.0% 3.0% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201091400.pktlen.png)
detailed numbers
[ 16- 31]: 6054
[ 32- 63]: 897504
[ 64- 127]: 437603
[ 128- 255]: 140433
[ 256- 511]: 142688
[ 512- 1023]: 338093
[ 1024- 2047]: 1036249
Protocol Breakdown
![[protocol breakdown chart]](200201091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2998624 (100.00%) 1932759031 (100.00%) 644.55
ip 2991358 ( 99.76%) 1932545542 ( 99.99%) 646.04
tcp 2663861 ( 88.84%) 1848964004 ( 95.66%) 694.09
http(s) 1108908 ( 36.98%) 1001628005 ( 51.82%) 903.26
http(c) 305003 ( 10.17%) 27894383 ( 1.44%) 91.46
squid 67068 ( 2.24%) 88210079 ( 4.56%) 1315.23
smtp 74388 ( 2.48%) 38310699 ( 1.98%) 515.01
nntp 797 ( 0.03%) 501261 ( 0.03%) 628.93
ftp 57736 ( 1.93%) 54814575 ( 2.84%) 949.40
pop3 5102 ( 0.17%) 836546 ( 0.04%) 163.96
imap 393 ( 0.01%) 275636 ( 0.01%) 701.36
telnet 2072 ( 0.07%) 307489 ( 0.02%) 148.40
ssh 3604 ( 0.12%) 351013 ( 0.02%) 97.40
dns 1246 ( 0.04%) 79644 ( 0.00%) 63.92
bgp 212 ( 0.01%) 33868 ( 0.00%) 159.75
napster 388305 ( 12.95%) 256183545 ( 13.25%) 659.75
realaud 107 ( 0.00%) 9830 ( 0.00%) 91.87
rtsp 20430 ( 0.68%) 11207790 ( 0.58%) 548.59
icecast 1869 ( 0.06%) 2569684 ( 0.13%) 1374.90
hotline 32725 ( 1.09%) 1964094 ( 0.10%) 60.02
other 593823 ( 19.80%) 363783066 ( 18.82%) 612.61
udp 266365 ( 8.88%) 75177872 ( 3.89%) 282.24
dns 97338 ( 3.25%) 10938832 ( 0.57%) 112.38
rip 74 ( 0.00%) 4884 ( 0.00%) 66.00
realaud 32268 ( 1.08%) 18644460 ( 0.96%) 577.80
halflif 45 ( 0.00%) 2700 ( 0.00%) 60.00
everque 1 ( 0.00%) 78 ( 0.00%) 78.00
quake 2 ( 0.00%) 120 ( 0.00%) 60.00
other 136625 ( 4.56%) 45580993 ( 2.36%) 333.62
icmp 53853 ( 1.80%) 4669099 ( 0.24%) 86.70
igmp 2734 ( 0.09%) 2046108 ( 0.11%) 748.39
ipsec 64 ( 0.00%) 11776 ( 0.00%) 184.00
ip6 2816 ( 0.09%) 1582283 ( 0.08%) 561.89
other 1665 ( 0.06%) 94400 ( 0.00%) 56.70
frag 12131 ( 0.40%) 14083489 ( 0.73%) 1160.95
tcpdump file: 200201091400.dump.gz (74.52 MB)