Traffic Trace Info
DumpFile: 200201251400.dump
FileSize: 199.04MB
Id: 200201251400
StartTime: Fri Jan 25 14:00:00 2002
EndTime: Fri Jan 25 14:12:15 2002
TotalTime: 734.37 seconds
TotalCapSize: 153.39MB CapLen: 96 bytes
# of packets: 2991566 (1781.45MB)
AvgRate: 20.35Mbps stddev:2.65M
IP flow (unique src/dst pair) Information
# of flows: 69791 (avg. 42.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 4.5% 3.2% 3.1% 3.0% 2.1% 2.1% 1.8% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 41951
Top 10 bandwidth usage (bytes/total in %):
5.5% 5.4% 5.3% 4.7% 3.6% 3.2% 3.2% 3.1% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201251400.pktlen.png)
detailed numbers
[ 16- 31]: 28167
[ 32- 63]: 994419
[ 64- 127]: 420509
[ 128- 255]: 135054
[ 256- 511]: 119546
[ 512- 1023]: 245988
[ 1024- 2047]: 1047883
Protocol Breakdown
![[protocol breakdown chart]](200201251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2991566 (100.00%) 1867988359 (100.00%) 624.42
ip 2956605 ( 98.83%) 1866952794 ( 99.94%) 631.45
tcp 2518331 ( 84.18%) 1703104756 ( 91.17%) 676.28
http(s) 957089 ( 31.99%) 989526670 ( 52.97%) 1033.89
http(c) 615313 ( 20.57%) 61540681 ( 3.29%) 100.02
squid 6241 ( 0.21%) 1287581 ( 0.07%) 206.31
smtp 45107 ( 1.51%) 22867510 ( 1.22%) 506.96
nntp 31 ( 0.00%) 2386 ( 0.00%) 76.97
ftp 76509 ( 2.56%) 67273579 ( 3.60%) 879.29
pop3 5672 ( 0.19%) 948219 ( 0.05%) 167.18
imap 199 ( 0.01%) 15706 ( 0.00%) 78.92
telnet 2490 ( 0.08%) 267274 ( 0.01%) 107.34
ssh 2498 ( 0.08%) 274812 ( 0.01%) 110.01
dns 1013 ( 0.03%) 190388 ( 0.01%) 187.94
bgp 170 ( 0.01%) 34417 ( 0.00%) 202.45
napster 530731 ( 17.74%) 402520695 ( 21.55%) 758.43
realaud 3364 ( 0.11%) 1463900 ( 0.08%) 435.17
rtsp 14405 ( 0.48%) 1627483 ( 0.09%) 112.98
icecast 24 ( 0.00%) 1941 ( 0.00%) 80.88
hotline 8246 ( 0.28%) 11698975 ( 0.63%) 1418.75
other 248981 ( 8.32%) 141553499 ( 7.58%) 568.53
udp 365951 ( 12.23%) 147309496 ( 7.89%) 402.54
dns 195953 ( 6.55%) 23850010 ( 1.28%) 121.71
rip 148 ( 0.00%) 16448 ( 0.00%) 111.14
realaud 8690 ( 0.29%) 3621288 ( 0.19%) 416.72
halflif 304 ( 0.01%) 87562 ( 0.00%) 288.03
quake 9 ( 0.00%) 711 ( 0.00%) 79.00
other 156199 ( 5.22%) 114390603 ( 6.12%) 732.34
icmp 56058 ( 1.87%) 15387250 ( 0.82%) 274.49
ipsec 27 ( 0.00%) 4994 ( 0.00%) 184.96
ip6 1852 ( 0.06%) 589443 ( 0.03%) 318.27
other 14386 ( 0.48%) 556855 ( 0.03%) 38.71
frag 69654 ( 2.33%) 96450647 ( 5.16%) 1384.71
tcpdump file: 200201251400.dump.gz (72.53 MB)