Traffic Trace Info
DumpFile: 200201261400.dump
FileSize: 198.86MB
Id: 200201261400
StartTime: Sat Jan 26 14:00:00 2002
EndTime: Sat Jan 26 14:15:04 2002
TotalTime: 903.05 seconds
TotalCapSize: 153.24MB CapLen: 96 bytes
# of packets: 2989668 (1697.28MB)
AvgRate: 15.77Mbps stddev:1.66M
IP flow (unique src/dst pair) Information
# of flows: 71556 (avg. 41.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 4.5% 3.7% 3.5% 3.2% 2.8% 2.6% 2.3% 2.2% 2.0%
IP address Information
# of IPv4 addresses: 45013
Top 10 bandwidth usage (bytes/total in %):
5.4% 5.4% 4.6% 4.5% 4.5% 3.8% 3.7% 3.7% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201261400.pktlen.png)
detailed numbers
[ 16- 31]: 18504
[ 32- 63]: 1016158
[ 64- 127]: 449277
[ 128- 255]: 185189
[ 256- 511]: 104059
[ 512- 1023]: 212083
[ 1024- 2047]: 1004398
Protocol Breakdown
![[protocol breakdown chart]](200201261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2989668 (100.00%) 1779726828 (100.00%) 595.29
ip 2966053 ( 99.21%) 1779025198 ( 99.96%) 599.80
tcp 2400242 ( 80.28%) 1633655314 ( 91.79%) 680.62
http(s) 615770 ( 20.60%) 648047173 ( 36.41%) 1052.42
http(c) 426112 ( 14.25%) 42344580 ( 2.38%) 99.37
squid 2794 ( 0.09%) 543217 ( 0.03%) 194.42
smtp 43556 ( 1.46%) 14366532 ( 0.81%) 329.84
nntp 28 ( 0.00%) 5216 ( 0.00%) 186.29
ftp 19783 ( 0.66%) 12546499 ( 0.70%) 634.21
pop3 6127 ( 0.20%) 838436 ( 0.05%) 136.84
imap 1 ( 0.00%) 60 ( 0.00%) 60.00
telnet 2279 ( 0.08%) 307310 ( 0.02%) 134.84
ssh 34006 ( 1.14%) 41545878 ( 2.33%) 1221.72
dns 1044 ( 0.03%) 67448 ( 0.00%) 64.61
bgp 236 ( 0.01%) 49905 ( 0.00%) 211.46
napster 795513 ( 26.61%) 644651693 ( 36.22%) 810.36
realaud 34 ( 0.00%) 3179 ( 0.00%) 93.50
rtsp 16882 ( 0.56%) 1194286 ( 0.07%) 70.74
icecast 163 ( 0.01%) 58431 ( 0.00%) 358.47
hotline 11827 ( 0.40%) 1009235 ( 0.06%) 85.33
other 423902 ( 14.18%) 226069491 ( 12.70%) 533.31
udp 475361 ( 15.90%) 133759602 ( 7.52%) 281.39
dns 257348 ( 8.61%) 31979706 ( 1.80%) 124.27
rip 180 ( 0.01%) 20440 ( 0.00%) 113.56
realaud 51926 ( 1.74%) 46036580 ( 2.59%) 886.58
halflif 336 ( 0.01%) 71100 ( 0.00%) 211.61
everque 18 ( 0.00%) 5658 ( 0.00%) 314.33
cuseeme 4 ( 0.00%) 916 ( 0.00%) 229.00
other 165514 ( 5.54%) 55643906 ( 3.13%) 336.19
icmp 76761 ( 2.57%) 10574131 ( 0.59%) 137.75
ipsec 120 ( 0.00%) 17904 ( 0.00%) 149.20
ip6 1967 ( 0.07%) 540857 ( 0.03%) 274.97
other 11602 ( 0.39%) 477390 ( 0.03%) 41.15
frag 24485 ( 0.82%) 32002994 ( 1.80%) 1307.04
tcpdump file: 200201261400.dump.gz (71.29 MB)