Traffic Trace Info
DumpFile: 200201111400.dump
FileSize: 198.22MB
Id: 200201111400
StartTime: Fri Jan 11 14:00:00 2002
EndTime: Fri Jan 11 14:06:00 2002
TotalTime: 360.70 seconds
TotalCapSize: 152.63MB CapLen: 96 bytes
# of packets: 2987600 (977.80MB)
AvgRate: 22.72Mbps stddev:2.85M
IP flow (unique src/dst pair) Information
# of flows: 58572 (avg. 51.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.3% 6.8% 2.7% 1.8% 1.8% 1.6% 1.6% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 44967
Top 10 bandwidth usage (bytes/total in %):
10.4% 10.3% 6.8% 6.8% 4.5% 3.4% 3.1% 2.7% 2.7% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201111400.pktlen.png)
detailed numbers
[ 16- 31]: 35121
[ 32- 63]: 1873020
[ 64- 127]: 232463
[ 128- 255]: 93517
[ 256- 511]: 79655
[ 512- 1023]: 167792
[ 1024- 2047]: 506032
Protocol Breakdown
![[protocol breakdown chart]](200201111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2987600 (100.00%) 1025301256 (100.00%) 343.19
ip 2931785 ( 98.13%) 1023613447 ( 99.84%) 349.14
tcp 2719460 ( 91.02%) 985856471 ( 96.15%) 362.52
http(s) 355483 ( 11.90%) 337337093 ( 32.90%) 948.95
http(c) 281359 ( 9.42%) 28719384 ( 2.80%) 102.07
squid 4425 ( 0.15%) 524880 ( 0.05%) 118.62
smtp 24646 ( 0.82%) 6973450 ( 0.68%) 282.94
nntp 120 ( 0.00%) 7791 ( 0.00%) 64.92
ftp 24578 ( 0.82%) 4187151 ( 0.41%) 170.36
pop3 2505 ( 0.08%) 391477 ( 0.04%) 156.28
imap 132 ( 0.00%) 10820 ( 0.00%) 81.97
telnet 20 ( 0.00%) 1947 ( 0.00%) 97.35
ssh 544 ( 0.02%) 158727 ( 0.02%) 291.78
dns 416 ( 0.01%) 28318 ( 0.00%) 68.07
bgp 126 ( 0.00%) 18775 ( 0.00%) 149.01
napster 333128 ( 11.15%) 206920894 ( 20.18%) 621.15
realaud 15 ( 0.00%) 1352 ( 0.00%) 90.13
rtsp 606 ( 0.02%) 140840 ( 0.01%) 232.41
icecast 1413 ( 0.05%) 1167854 ( 0.11%) 826.51
hotline 2 ( 0.00%) 263 ( 0.00%) 131.50
other 1689554 ( 56.55%) 399251392 ( 38.94%) 236.31
udp 168225 ( 5.63%) 34269326 ( 3.34%) 203.71
dns 106286 ( 3.56%) 13061335 ( 1.27%) 122.89
rip 95 ( 0.00%) 10930 ( 0.00%) 115.05
realaud 8979 ( 0.30%) 6474964 ( 0.63%) 721.12
other 51757 ( 1.73%) 14629402 ( 1.43%) 282.66
icmp 29087 ( 0.97%) 2744959 ( 0.27%) 94.37
ipsec 20 ( 0.00%) 3680 ( 0.00%) 184.00
ip6 631 ( 0.02%) 238772 ( 0.02%) 378.40
other 14362 ( 0.48%) 500239 ( 0.05%) 34.83
frag 7438 ( 0.25%) 7399385 ( 0.72%) 994.81
tcpdump file: 200201111400.dump.gz (53.73 MB)