Traffic Trace Info
DumpFile: 200201101400.dump
FileSize: 198.15MB
Id: 200201101400
StartTime: Thu Jan 10 14:00:00 2002
EndTime: Thu Jan 10 14:12:43 2002
TotalTime: 762.95 seconds
TotalCapSize: 152.49MB CapLen: 96 bytes
# of packets: 2992756 (2173.92MB)
AvgRate: 23.91Mbps stddev:3.91M
IP flow (unique src/dst pair) Information
# of flows: 68051 (avg. 43.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 4.0% 3.4% 1.9% 1.7% 1.6% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 54494
Top 10 bandwidth usage (bytes/total in %):
20.1% 7.1% 6.5% 5.7% 4.0% 4.0% 3.6% 3.4% 3.4% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201101400.pktlen.png)
detailed numbers
[ 16- 31]: 25751
[ 32- 63]: 806214
[ 64- 127]: 331805
[ 128- 255]: 116542
[ 256- 511]: 106552
[ 512- 1023]: 263841
[ 1024- 2047]: 1342051
Protocol Breakdown
![[protocol breakdown chart]](200201101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2992756 (100.00%) 2279521541 (100.00%) 761.68
ip 2948848 ( 98.53%) 2278184659 ( 99.94%) 772.57
tcp 2610291 ( 87.22%) 2099706710 ( 92.11%) 804.40
http(s) 798715 ( 26.69%) 853284906 ( 37.43%) 1068.32
http(c) 196516 ( 6.57%) 17839163 ( 0.78%) 90.78
squid 14861 ( 0.50%) 1849125 ( 0.08%) 124.43
smtp 46092 ( 1.54%) 20537581 ( 0.90%) 445.58
nntp 437 ( 0.01%) 30503 ( 0.00%) 69.80
ftp 83587 ( 2.79%) 24379550 ( 1.07%) 291.67
pop3 4310 ( 0.14%) 578478 ( 0.03%) 134.22
telnet 1564 ( 0.05%) 459865 ( 0.02%) 294.03
ssh 8611 ( 0.29%) 1409645 ( 0.06%) 163.70
dns 655 ( 0.02%) 43350 ( 0.00%) 66.18
bgp 147 ( 0.00%) 25844 ( 0.00%) 175.81
napster 192953 ( 6.45%) 178350567 ( 7.82%) 924.32
rtsp 22847 ( 0.76%) 1397838 ( 0.06%) 61.18
icecast 7105 ( 0.24%) 8084933 ( 0.35%) 1137.92
hotline 20201 ( 0.67%) 29737330 ( 1.30%) 1472.07
other 1210896 ( 40.46%) 961655941 ( 42.19%) 794.17
udp 284829 ( 9.52%) 174249865 ( 7.64%) 611.77
dns 77260 ( 2.58%) 9069487 ( 0.40%) 117.39
rip 50 ( 0.00%) 3300 ( 0.00%) 66.00
realaud 26479 ( 0.88%) 23889752 ( 1.05%) 902.22
halflif 9 ( 0.00%) 540 ( 0.00%) 60.00
quake 1 ( 0.00%) 78 ( 0.00%) 78.00
other 180898 ( 6.04%) 141278909 ( 6.20%) 780.99
icmp 38286 ( 1.28%) 3333817 ( 0.15%) 87.08
ipsec 36 ( 0.00%) 6624 ( 0.00%) 184.00
ip6 1434 ( 0.05%) 386082 ( 0.02%) 269.23
other 13972 ( 0.47%) 501561 ( 0.02%) 35.90
frag 55218 ( 1.85%) 79852500 ( 3.50%) 1446.13
tcpdump file: 200201101400.dump.gz (74.60 MB)