Traffic Trace Info
DumpFile: 200201211400.dump
FileSize: 197.05MB
Id: 200201211400
StartTime: Mon Jan 21 14:00:00 2002
EndTime: Mon Jan 21 14:10:45 2002
TotalTime: 644.70 seconds
TotalCapSize: 151.47MB CapLen: 96 bytes
# of packets: 2987159 (1502.77MB)
AvgRate: 19.55Mbps stddev:2.60M
IP flow (unique src/dst pair) Information
# of flows: 71132 (avg. 41.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.7% 2.9% 2.8% 2.8% 1.9% 1.4% 1.4% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 43719
Top 10 bandwidth usage (bytes/total in %):
9.4% 8.8% 3.9% 3.4% 3.2% 3.0% 2.9% 2.9% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201211400.pktlen.png)
detailed numbers
[ 16- 31]: 28515
[ 32- 63]: 1080349
[ 64- 127]: 403319
[ 128- 255]: 142340
[ 256- 511]: 129750
[ 512- 1023]: 450558
[ 1024- 2047]: 752328
Protocol Breakdown
![[protocol breakdown chart]](200201211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2987159 (100.00%) 1575767173 (100.00%) 527.51
ip 2941346 ( 98.47%) 1574379720 ( 99.91%) 535.26
tcp 2372572 ( 79.43%) 1367343288 ( 86.77%) 576.31
http(s) 693109 ( 23.20%) 645086066 ( 40.94%) 930.71
http(c) 557010 ( 18.65%) 57620271 ( 3.66%) 103.45
squid 2874 ( 0.10%) 261151 ( 0.02%) 90.87
smtp 42515 ( 1.42%) 10990394 ( 0.70%) 258.51
nntp 14189 ( 0.47%) 19495842 ( 1.24%) 1374.01
ftp 28938 ( 0.97%) 12348740 ( 0.78%) 426.73
pop3 9346 ( 0.31%) 747158 ( 0.05%) 79.94
imap 185 ( 0.01%) 15409 ( 0.00%) 83.29
telnet 2081 ( 0.07%) 142833 ( 0.01%) 68.64
ssh 40754 ( 1.36%) 2743964 ( 0.17%) 67.33
dns 551 ( 0.02%) 45220 ( 0.00%) 82.07
bgp 162 ( 0.01%) 34523 ( 0.00%) 213.10
napster 463038 ( 15.50%) 262107944 ( 16.63%) 566.06
realaud 2176 ( 0.07%) 130560 ( 0.01%) 60.00
rtsp 7841 ( 0.26%) 3109729 ( 0.20%) 396.60
icecast 254 ( 0.01%) 75927 ( 0.00%) 298.93
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 507200 ( 16.98%) 352374328 ( 22.36%) 694.74
udp 515128 ( 17.24%) 201373932 ( 12.78%) 390.92
dns 144462 ( 4.84%) 18679981 ( 1.19%) 129.31
rip 134 ( 0.00%) 15284 ( 0.00%) 114.06
realaud 13684 ( 0.46%) 8358224 ( 0.53%) 610.80
halflif 177 ( 0.01%) 40740 ( 0.00%) 230.17
other 356514 ( 11.93%) 174160736 ( 11.05%) 488.51
icmp 39141 ( 1.31%) 4889055 ( 0.31%) 124.91
ipsec 28 ( 0.00%) 5152 ( 0.00%) 184.00
ip6 934 ( 0.03%) 275155 ( 0.02%) 294.60
other 13543 ( 0.45%) 493138 ( 0.03%) 36.41
frag 7746 ( 0.26%) 6458504 ( 0.41%) 833.79
tcpdump file: 200201211400.dump.gz (73.82 MB)