Traffic Trace Info
DumpFile: 200201291400.dump
FileSize: 668.51MB
Id: 200201291400
StartTime: Tue Jan 29 14:00:00 2002
EndTime: Tue Jan 29 14:45:16 2002
TotalTime: 2715.51 seconds
TotalCapSize: 516.48MB CapLen: 96 bytes
# of packets: 9962709 (5243.40MB)
AvgRate: 16.20Mbps stddev:1.98M
IP flow (unique src/dst pair) Information
# of flows: 210337 (avg. 47.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.7% 2.4% 1.6% 1.5% 1.3% 1.2% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 113723
Top 10 bandwidth usage (bytes/total in %):
23.5% 14.7% 7.6% 2.4% 2.4% 1.8% 1.8% 1.7% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201291400.pktlen.png)
detailed numbers
[ 16- 31]: 78216
[ 32- 63]: 3155462
[ 64- 127]: 2082907
[ 128- 255]: 499824
[ 256- 511]: 399252
[ 512- 1023]: 716571
[ 1024- 2047]: 3030477
Protocol Breakdown
![[protocol breakdown chart]](200201291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9962709 (100.00%) 5498102516 (100.00%) 551.87
ip 9858465 ( 98.95%) 5494993174 ( 99.94%) 557.39
tcp 7906829 ( 79.36%) 5199301956 ( 94.57%) 657.57
http(s) 2535665 ( 25.45%) 2377288723 ( 43.24%) 937.54
http(c) 2085641 ( 20.93%) 220544140 ( 4.01%) 105.74
squid 53002 ( 0.53%) 38621711 ( 0.70%) 728.68
smtp 114997 ( 1.15%) 38681778 ( 0.70%) 336.37
nntp 465 ( 0.00%) 32217 ( 0.00%) 69.28
ftp 116682 ( 1.17%) 80811683 ( 1.47%) 692.58
pop3 23603 ( 0.24%) 5016382 ( 0.09%) 212.53
imap 234 ( 0.00%) 18415 ( 0.00%) 78.70
telnet 5396 ( 0.05%) 1135736 ( 0.02%) 210.48
ssh 24220 ( 0.24%) 4240938 ( 0.08%) 175.10
dns 2605 ( 0.03%) 171416 ( 0.00%) 65.80
bgp 589 ( 0.01%) 112812 ( 0.00%) 191.53
napster 1342206 ( 13.47%) 1262516583 ( 22.96%) 940.63
realaud 738 ( 0.01%) 53020 ( 0.00%) 71.84
rtsp 110576 ( 1.11%) 100726997 ( 1.83%) 910.93
icecast 42983 ( 0.43%) 46072977 ( 0.84%) 1071.89
other 1446362 ( 14.52%) 1023224567 ( 18.61%) 707.45
udp 1714907 ( 17.21%) 272120053 ( 4.95%) 158.68
dns 1210875 ( 12.15%) 124147543 ( 2.26%) 102.53
rip 537 ( 0.01%) 61902 ( 0.00%) 115.27
realaud 42556 ( 0.43%) 29431949 ( 0.54%) 691.61
halflif 7 ( 0.00%) 420 ( 0.00%) 60.00
everque 890 ( 0.01%) 66754 ( 0.00%) 75.00
other 459744 ( 4.61%) 118266719 ( 2.15%) 257.24
icmp 181481 ( 1.82%) 20156914 ( 0.37%) 111.07
ipsec 195 ( 0.00%) 29210 ( 0.00%) 149.79
ip6 4805 ( 0.05%) 1395658 ( 0.03%) 290.46
other 50248 ( 0.50%) 1989383 ( 0.04%) 39.59
frag 42826 ( 0.43%) 54404304 ( 0.99%) 1270.36
tcpdump file: 200201291400.dump.gz (238.83 MB)