Traffic Trace Info
DumpFile: 200201171400.dump
FileSize: 199.86MB
Id: 200201171400
StartTime: Thu Jan 17 14:00:00 2002
EndTime: Thu Jan 17 14:11:54 2002
TotalTime: 713.70 seconds
TotalCapSize: 154.23MB CapLen: 96 bytes
# of packets: 2990745 (1559.47MB)
AvgRate: 18.33Mbps stddev:1.68M
IP flow (unique src/dst pair) Information
# of flows: 100297 (avg. 29.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.1% 2.8% 2.5% 2.2% 2.1% 1.4% 1.4% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 71964
Top 10 bandwidth usage (bytes/total in %):
20.7% 20.1% 3.2% 2.8% 2.8% 2.5% 2.5% 2.4% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201171400.pktlen.png)
detailed numbers
[ 16- 31]: 27297
[ 32- 63]: 1011495
[ 64- 127]: 508495
[ 128- 255]: 158556
[ 256- 511]: 130144
[ 512- 1023]: 261295
[ 1024- 2047]: 893463
Protocol Breakdown
![[protocol breakdown chart]](200201171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2990745 (100.00%) 1635218099 (100.00%) 546.76
ip 2949562 ( 98.62%) 1633977841 ( 99.92%) 553.97
tcp 2450892 ( 81.95%) 1529328391 ( 93.52%) 623.99
http(s) 597971 ( 19.99%) 519821905 ( 31.79%) 869.31
http(c) 566951 ( 18.96%) 60044341 ( 3.67%) 105.91
squid 15016 ( 0.50%) 1889873 ( 0.12%) 125.86
smtp 54840 ( 1.83%) 23581522 ( 1.44%) 430.01
nntp 177 ( 0.01%) 11656 ( 0.00%) 65.85
ftp 72404 ( 2.42%) 24364492 ( 1.49%) 336.51
pop3 5212 ( 0.17%) 963377 ( 0.06%) 184.84
imap 115 ( 0.00%) 8661 ( 0.00%) 75.31
telnet 1052 ( 0.04%) 233496 ( 0.01%) 221.95
ssh 5508 ( 0.18%) 748405 ( 0.05%) 135.88
dns 1371 ( 0.05%) 90490 ( 0.01%) 66.00
bgp 143 ( 0.00%) 26097 ( 0.00%) 182.50
napster 476122 ( 15.92%) 320495094 ( 19.60%) 673.14
realaud 16 ( 0.00%) 960 ( 0.00%) 60.00
rtsp 306 ( 0.01%) 47574 ( 0.00%) 155.47
icecast 154 ( 0.01%) 56353 ( 0.00%) 365.93
hotline 27358 ( 0.91%) 41394812 ( 2.53%) 1513.08
other 625877 ( 20.93%) 535538317 ( 32.75%) 855.66
udp 418902 ( 14.01%) 98339016 ( 6.01%) 234.75
dns 212348 ( 7.10%) 25136957 ( 1.54%) 118.38
rip 178 ( 0.01%) 20808 ( 0.00%) 116.90
realaud 590 ( 0.02%) 79700 ( 0.00%) 135.08
everque 697 ( 0.02%) 56305 ( 0.00%) 80.78
quake 2 ( 0.00%) 120 ( 0.00%) 60.00
other 202778 ( 6.78%) 69830255 ( 4.27%) 344.37
icmp 67053 ( 2.24%) 5537003 ( 0.34%) 82.58
ipsec 165 ( 0.01%) 27110 ( 0.00%) 164.30
ip6 1587 ( 0.05%) 348763 ( 0.02%) 219.76
other 10963 ( 0.37%) 397558 ( 0.02%) 36.26
frag 21999 ( 0.74%) 26698652 ( 1.63%) 1213.63
tcpdump file: 200201171400.dump.gz (73.34 MB)