Traffic Trace Info
DumpFile: 200201151400.dump
FileSize: 198.01MB
Id: 200201151400
StartTime: Tue Jan 15 14:00:01 2002
EndTime: Tue Jan 15 14:08:13 2002
TotalTime: 492.25 seconds
TotalCapSize: 152.54MB CapLen: 96 bytes
# of packets: 2980031 (2058.44MB)
AvgRate: 35.08Mbps stddev:3.24M
IP flow (unique src/dst pair) Information
# of flows: 91162 (avg. 32.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.6% 5.1% 2.0% 1.8% 1.6% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 71306
Top 10 bandwidth usage (bytes/total in %):
18.5% 12.9% 12.6% 10.7% 5.9% 4.9% 3.8% 3.6% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201151400.pktlen.png)
detailed numbers
[ 16- 31]: 51257
[ 32- 63]: 917488
[ 64- 127]: 330665
[ 128- 255]: 92207
[ 256- 511]: 97295
[ 512- 1023]: 217015
[ 1024- 2047]: 1274104
Protocol Breakdown
![[protocol breakdown chart]](200201151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2980031 (100.00%) 2158433291 (100.00%) 724.30
ip 2899013 ( 97.28%) 2155983005 ( 99.89%) 743.70
tcp 2633734 ( 88.38%) 2093588152 ( 97.00%) 794.91
http(s) 870151 ( 29.20%) 986833481 ( 45.72%) 1134.09
http(c) 442351 ( 14.84%) 47361645 ( 2.19%) 107.07
squid 9327 ( 0.31%) 2341281 ( 0.11%) 251.02
smtp 33424 ( 1.12%) 9908957 ( 0.46%) 296.46
nntp 76 ( 0.00%) 5182 ( 0.00%) 68.18
ftp 111715 ( 3.75%) 40761680 ( 1.89%) 364.87
pop3 3363 ( 0.11%) 864820 ( 0.04%) 257.16
imap 128 ( 0.00%) 9040 ( 0.00%) 70.62
telnet 587 ( 0.02%) 118383 ( 0.01%) 201.67
ssh 1369 ( 0.05%) 244518 ( 0.01%) 178.61
dns 1074 ( 0.04%) 73028 ( 0.00%) 68.00
bgp 116 ( 0.00%) 18638 ( 0.00%) 160.67
napster 197195 ( 6.62%) 136930752 ( 6.34%) 694.39
realaud 450 ( 0.02%) 28071 ( 0.00%) 62.38
rtsp 6329 ( 0.21%) 544953 ( 0.03%) 86.10
icecast 175 ( 0.01%) 63914 ( 0.00%) 365.22
hotline 4 ( 0.00%) 526 ( 0.00%) 131.50
other 955535 ( 32.06%) 867466074 ( 40.19%) 907.83
udp 197803 ( 6.64%) 56568691 ( 2.62%) 285.99
dns 110119 ( 3.70%) 14595094 ( 0.68%) 132.54
rip 129 ( 0.00%) 14834 ( 0.00%) 114.99
realaud 12557 ( 0.42%) 9834102 ( 0.46%) 783.16
halflif 131 ( 0.00%) 28405 ( 0.00%) 216.83
everque 1 ( 0.00%) 87 ( 0.00%) 87.00
other 74827 ( 2.51%) 32092348 ( 1.49%) 428.89
icmp 43872 ( 1.47%) 4827089 ( 0.22%) 110.03
ipsec 20 ( 0.00%) 3680 ( 0.00%) 184.00
ip6 756 ( 0.03%) 202153 ( 0.01%) 267.40
other 22828 ( 0.77%) 793240 ( 0.04%) 34.75
frag 20920 ( 0.70%) 22081352 ( 1.02%) 1055.51
tcpdump file: 200201151400.dump.gz (73.19 MB)