Traffic Trace Info
DumpFile: 200201281400.dump
FileSize: 201.17MB
Id: 200201281400
StartTime: Mon Jan 28 14:00:00 2002
EndTime: Mon Jan 28 14:12:39 2002
TotalTime: 759.23 seconds
TotalCapSize: 155.58MB CapLen: 96 bytes
# of packets: 2987960 (1640.18MB)
AvgRate: 18.12Mbps stddev:2.78M
IP flow (unique src/dst pair) Information
# of flows: 103395 (avg. 28.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 5.3% 5.0% 3.0% 2.6% 2.5% 2.3% 2.0% 1.9% 1.7%
IP address Information
# of IPv4 addresses: 72680
Top 10 bandwidth usage (bytes/total in %):
8.8% 7.8% 6.7% 5.5% 5.5% 5.4% 5.0% 3.9% 3.7% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201281400.pktlen.png)
detailed numbers
[ 16- 31]: 25877
[ 32- 63]: 1091616
[ 64- 127]: 464995
[ 128- 255]: 129264
[ 256- 511]: 120550
[ 512- 1023]: 195485
[ 1024- 2047]: 960173
Protocol Breakdown
![[protocol breakdown chart]](200201281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2987960 (100.00%) 1719851070 (100.00%) 575.59
ip 2952112 ( 98.80%) 1718777191 ( 99.94%) 582.22
tcp 2595396 ( 86.86%) 1669977942 ( 97.10%) 643.44
http(s) 779188 ( 26.08%) 802216533 ( 46.64%) 1029.55
http(c) 649747 ( 21.75%) 67057048 ( 3.90%) 103.20
squid 9103 ( 0.30%) 835940 ( 0.05%) 91.83
smtp 38129 ( 1.28%) 8693283 ( 0.51%) 228.00
nntp 113 ( 0.00%) 7755 ( 0.00%) 68.63
ftp 56217 ( 1.88%) 9176275 ( 0.53%) 163.23
pop3 4656 ( 0.16%) 936401 ( 0.05%) 201.12
imap 50 ( 0.00%) 3963 ( 0.00%) 79.26
telnet 540 ( 0.02%) 84528 ( 0.00%) 156.53
ssh 1664 ( 0.06%) 201986 ( 0.01%) 121.39
dns 431 ( 0.01%) 31702 ( 0.00%) 73.55
bgp 191 ( 0.01%) 40761 ( 0.00%) 213.41
napster 383658 ( 12.84%) 262070929 ( 15.24%) 683.08
realaud 2190 ( 0.07%) 132630 ( 0.01%) 60.56
rtsp 19603 ( 0.66%) 1216775 ( 0.07%) 62.07
icecast 72 ( 0.00%) 12390 ( 0.00%) 172.08
hotline 344 ( 0.01%) 23210 ( 0.00%) 67.47
other 649175 ( 21.73%) 517223892 ( 30.07%) 796.74
udp 279657 ( 9.36%) 40252128 ( 2.34%) 143.93
dns 165658 ( 5.54%) 20797800 ( 1.21%) 125.55
rip 175 ( 0.01%) 19310 ( 0.00%) 110.34
realaud 7009 ( 0.23%) 1921583 ( 0.11%) 274.16
halflif 193 ( 0.01%) 45892 ( 0.00%) 237.78
quake 2 ( 0.00%) 157 ( 0.00%) 78.50
other 106588 ( 3.57%) 17456722 ( 1.02%) 163.78
icmp 53596 ( 1.79%) 7113756 ( 0.41%) 132.73
ipsec 41 ( 0.00%) 7395 ( 0.00%) 180.37
ip6 1066 ( 0.04%) 360250 ( 0.02%) 337.95
other 22356 ( 0.75%) 1065720 ( 0.06%) 47.67
frag 2542 ( 0.09%) 2323252 ( 0.14%) 913.95
tcpdump file: 200201281400.dump.gz (73.34 MB)