Traffic Trace Info
DumpFile: 200201131400.dump
FileSize: 199.44MB
Id: 200201131400
StartTime: Sun Jan 13 14:00:01 2002
EndTime: Sun Jan 13 14:19:33 2002
TotalTime: 1172.83 seconds
TotalCapSize: 153.75MB CapLen: 96 bytes
# of packets: 2993950 (1203.50MB)
AvgRate: 8.61Mbps stddev:1.65M
IP flow (unique src/dst pair) Information
# of flows: 145443 (avg. 20.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 8.1% 2.7% 1.8% 1.7% 1.6% 1.6% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 117833
Top 10 bandwidth usage (bytes/total in %):
11.9% 8.5% 8.5% 8.3% 8.3% 6.5% 5.1% 4.2% 3.7% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201131400.pktlen.png)
detailed numbers
[ 16- 31]: 12284
[ 32- 63]: 1474085
[ 64- 127]: 468971
[ 128- 255]: 140074
[ 256- 511]: 111319
[ 512- 1023]: 111521
[ 1024- 2047]: 675696
Protocol Breakdown
![[protocol breakdown chart]](200201131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2993950 (100.00%) 1261962607 (100.00%) 421.50
ip 2972927 ( 99.30%) 1261322203 ( 99.95%) 424.27
tcp 2315418 ( 77.34%) 1051196151 ( 83.30%) 454.00
http(s) 498337 ( 16.64%) 522055007 ( 41.37%) 1047.59
http(c) 711900 ( 23.78%) 66379205 ( 5.26%) 93.24
squid 39718 ( 1.33%) 20918044 ( 1.66%) 526.66
smtp 16844 ( 0.56%) 6027823 ( 0.48%) 357.86
ftp 330448 ( 11.04%) 22695387 ( 1.80%) 68.68
pop3 5272 ( 0.18%) 1016639 ( 0.08%) 192.84
imap 189 ( 0.01%) 14113 ( 0.00%) 74.67
telnet 871 ( 0.03%) 129711 ( 0.01%) 148.92
ssh 3451 ( 0.12%) 224454 ( 0.02%) 65.04
dns 1354 ( 0.05%) 90813 ( 0.01%) 67.07
bgp 229 ( 0.01%) 39332 ( 0.00%) 171.76
napster 146047 ( 4.88%) 71110080 ( 5.63%) 486.90
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 51537 ( 1.72%) 3359615 ( 0.27%) 65.19
icecast 1230 ( 0.04%) 1079089 ( 0.09%) 877.31
hotline 105480 ( 3.52%) 104392756 ( 8.27%) 989.69
other 402336 ( 13.44%) 231657717 ( 18.36%) 575.78
udp 368889 ( 12.32%) 188033099 ( 14.90%) 509.73
dns 146217 ( 4.88%) 20722293 ( 1.64%) 141.72
rip 307 ( 0.01%) 35822 ( 0.00%) 116.68
realaud 1544 ( 0.05%) 94537 ( 0.01%) 61.23
halflif 1298 ( 0.04%) 490010 ( 0.04%) 377.51
everque 1999 ( 0.07%) 190770 ( 0.02%) 95.43
quake 4 ( 0.00%) 618 ( 0.00%) 154.50
other 209453 ( 7.00%) 156659338 ( 12.41%) 747.95
icmp 279652 ( 9.34%) 21304410 ( 1.69%) 76.18
ipsec 57 ( 0.00%) 10502 ( 0.00%) 184.25
ip6 1653 ( 0.06%) 487039 ( 0.04%) 294.64
other 7258 ( 0.24%) 291002 ( 0.02%) 40.09
frag 107969 ( 3.61%) 149539288 ( 11.85%) 1385.02
tcpdump file: 200201131400.dump.gz (69.09 MB)