Traffic Trace Info
DumpFile: 200201161400.dump
FileSize: 198.77MB
Id: 200201161400
StartTime: Wed Jan 16 14:00:00 2002
EndTime: Wed Jan 16 14:04:21 2002
TotalTime: 260.86 seconds
TotalCapSize: 153.09MB CapLen: 96 bytes
# of packets: 2993828 (604.40MB)
AvgRate: 19.45Mbps stddev:8.34M
IP flow (unique src/dst pair) Information
# of flows: 44719 (avg. 66.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.9% 2.4% 2.0% 1.9% 1.9% 1.7% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 34852
Top 10 bandwidth usage (bytes/total in %):
18.8% 4.2% 4.2% 3.1% 2.9% 2.9% 2.9% 2.7% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201161400.pktlen.png)
detailed numbers
[ 16- 31]: 13702
[ 32- 63]: 2418493
[ 64- 127]: 113783
[ 128- 255]: 47838
[ 256- 511]: 43790
[ 512- 1023]: 82168
[ 1024- 2047]: 274054
Protocol Breakdown
![[protocol breakdown chart]](200201161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2993828 (100.00%) 633763422 (100.00%) 211.69
ip 2971070 ( 99.24%) 633072059 ( 99.89%) 213.08
tcp 2787439 ( 93.11%) 570265765 ( 89.98%) 204.58
http(s) 251890 ( 8.41%) 224395661 ( 35.41%) 890.85
http(c) 263060 ( 8.79%) 25328104 ( 4.00%) 96.28
squid 4887 ( 0.16%) 489308 ( 0.08%) 100.12
smtp 25362 ( 0.85%) 4055865 ( 0.64%) 159.92
nntp 14217 ( 0.47%) 853331 ( 0.13%) 60.02
ftp 46250 ( 1.54%) 7177762 ( 1.13%) 155.19
pop3 15667 ( 0.52%) 1006969 ( 0.16%) 64.27
imap 26 ( 0.00%) 1946 ( 0.00%) 74.85
telnet 14224 ( 0.48%) 859544 ( 0.14%) 60.43
ssh 15904 ( 0.53%) 1036500 ( 0.16%) 65.17
dns 14552 ( 0.49%) 879867 ( 0.14%) 60.46
bgp 56 ( 0.00%) 11034 ( 0.00%) 197.04
napster 120343 ( 4.02%) 106328454 ( 16.78%) 883.54
realaud 86 ( 0.00%) 7221 ( 0.00%) 83.97
rtsp 10344 ( 0.35%) 1302746 ( 0.21%) 125.94
icecast 88 ( 0.00%) 22096 ( 0.00%) 251.09
hotline 2 ( 0.00%) 263 ( 0.00%) 131.50
other 1990334 ( 66.48%) 196503704 ( 31.01%) 98.73
udp 117434 ( 3.92%) 58284658 ( 9.20%) 496.32
dns 56024 ( 1.87%) 7200618 ( 1.14%) 128.53
rip 62 ( 0.00%) 6792 ( 0.00%) 109.55
realaud 12059 ( 0.40%) 11544157 ( 1.82%) 957.31
other 49277 ( 1.65%) 39532632 ( 6.24%) 802.25
icmp 58319 ( 1.95%) 4126836 ( 0.65%) 70.76
ipsec 12 ( 0.00%) 2208 ( 0.00%) 184.00
ip6 642 ( 0.02%) 138407 ( 0.02%) 215.59
other 7224 ( 0.24%) 254185 ( 0.04%) 35.19
frag 25032 ( 0.84%) 36106096 ( 5.70%) 1442.40
tcpdump file: 200201161400.dump.gz (42.22 MB)