Traffic Trace Info
DumpFile: 200201301400.dump
FileSize: 658.02MB
Id: 200201301400
StartTime: Wed Jan 30 14:00:00 2002
EndTime: Wed Jan 30 14:36:40 2002
TotalTime: 2200.16 seconds
TotalCapSize: 505.99MB CapLen: 96 bytes
# of packets: 9962933 (4033.10MB)
AvgRate: 15.38Mbps stddev:2.26M
IP flow (unique src/dst pair) Information
# of flows: 219875 (avg. 45.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.6% 1.6% 1.6% 1.5% 1.5% 1.5% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 136872
Top 10 bandwidth usage (bytes/total in %):
4.0% 3.7% 3.3% 3.1% 2.7% 2.5% 2.5% 2.5% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201301400.pktlen.png)
detailed numbers
[ 16- 31]: 73728
[ 32- 63]: 3809309
[ 64- 127]: 2335907
[ 128- 255]: 537774
[ 256- 511]: 418953
[ 512- 1023]: 613799
[ 1024- 2047]: 2173463
Protocol Breakdown
![[protocol breakdown chart]](200201301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9962933 (100.00%) 4229011295 (100.00%) 424.47
ip 9854867 ( 98.92%) 4225757339 ( 99.92%) 428.80
tcp 6576852 ( 66.01%) 3696768656 ( 87.41%) 562.09
http(s) 2035553 ( 20.43%) 2005984128 ( 47.43%) 985.47
http(c) 1887351 ( 18.94%) 198541807 ( 4.69%) 105.20
squid 4375 ( 0.04%) 1348428 ( 0.03%) 308.21
smtp 102245 ( 1.03%) 28057435 ( 0.66%) 274.41
nntp 287 ( 0.00%) 19777 ( 0.00%) 68.91
ftp 99122 ( 0.99%) 74595327 ( 1.76%) 752.56
pop3 21842 ( 0.22%) 7193165 ( 0.17%) 329.33
imap 278 ( 0.00%) 22831 ( 0.00%) 82.13
telnet 18911 ( 0.19%) 1209067 ( 0.03%) 63.93
ssh 13901 ( 0.14%) 1586276 ( 0.04%) 114.11
dns 3365 ( 0.03%) 1492660 ( 0.04%) 443.58
bgp 451 ( 0.00%) 82439 ( 0.00%) 182.79
napster 1070833 ( 10.75%) 779533750 ( 18.43%) 727.97
realaud 6297 ( 0.06%) 385494 ( 0.01%) 61.22
rtsp 25246 ( 0.25%) 20861784 ( 0.49%) 826.34
icecast 28519 ( 0.29%) 29530220 ( 0.70%) 1035.46
other 1257377 ( 12.62%) 546291297 ( 12.92%) 434.47
udp 1805139 ( 18.12%) 432227073 ( 10.22%) 239.44
dns 1145162 ( 11.49%) 123493079 ( 2.92%) 107.84
rip 441 ( 0.00%) 51026 ( 0.00%) 115.71
realaud 20654 ( 0.21%) 8769340 ( 0.21%) 424.58
halflif 1169 ( 0.01%) 275836 ( 0.01%) 235.96
quake 28 ( 0.00%) 2106 ( 0.00%) 75.21
other 622184 ( 6.24%) 281438935 ( 6.65%) 452.34
icmp 1343959 ( 13.49%) 87093033 ( 2.06%) 64.80
ipsec 609 ( 0.01%) 312142 ( 0.01%) 512.55
ip6 63007 ( 0.63%) 6882203 ( 0.16%) 109.23
other 65301 ( 0.66%) 2474232 ( 0.06%) 37.89
frag 180495 ( 1.81%) 217092952 ( 5.13%) 1202.76
tcpdump file: 200201301400.dump.gz (231.66 MB)