Traffic Trace Info
DumpFile: 200204251400.dump
FileSize: 340.05MB
Id: 200204251400
StartTime: Thu Apr 25 14:00:00 2002
EndTime: Thu Apr 25 14:18:33 2002
TotalTime: 1112.93 seconds
TotalCapSize: 263.81MB CapLen: 96 bytes
# of packets: 4996024 (2596.85MB)
AvgRate: 19.57Mbps stddev:2.19M
IP flow (unique src/dst pair) Information
# of flows: 134019 (avg. 37.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.3% 1.9% 1.8% 1.7% 1.7% 1.6% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 72322
Top 10 bandwidth usage (bytes/total in %):
5.9% 5.1% 3.6% 3.4% 3.4% 3.2% 2.3% 2.3% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200204251400.pktlen.png)
detailed numbers
[ 16- 31]: 24481
[ 32- 63]: 1640272
[ 64- 127]: 899888
[ 128- 255]: 255866
[ 256- 511]: 268480
[ 512- 1023]: 450625
[ 1024- 2047]: 1456412
Protocol Breakdown
![[protocol breakdown chart]](200204251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4996024 (100.00%) 2722998862 (100.00%) 545.03
ip 4940477 ( 98.89%) 2721281729 ( 99.94%) 550.81
tcp 4435474 ( 88.78%) 2612395905 ( 95.94%) 588.98
http(s) 1006198 ( 20.14%) 873471263 ( 32.08%) 868.09
http(c) 1100408 ( 22.03%) 126885821 ( 4.66%) 115.31
squid 10451 ( 0.21%) 5775333 ( 0.21%) 552.61
smtp 119982 ( 2.40%) 42715006 ( 1.57%) 356.01
nntp 40154 ( 0.80%) 40751239 ( 1.50%) 1014.87
ftp 124098 ( 2.48%) 79740389 ( 2.93%) 642.56
pop3 9865 ( 0.20%) 1163999 ( 0.04%) 117.99
imap 528 ( 0.01%) 40988 ( 0.00%) 77.63
telnet 1248 ( 0.02%) 216955 ( 0.01%) 173.84
ssh 3523 ( 0.07%) 644181 ( 0.02%) 182.85
dns 1663 ( 0.03%) 122815 ( 0.00%) 73.85
bgp 292 ( 0.01%) 64175 ( 0.00%) 219.78
napster 688993 ( 13.79%) 423871242 ( 15.57%) 615.20
realaud 3 ( 0.00%) 186 ( 0.00%) 62.00
rtsp 7511 ( 0.15%) 557604 ( 0.02%) 74.24
icecast 11213 ( 0.22%) 8966228 ( 0.33%) 799.63
hotline 9 ( 0.00%) 1269 ( 0.00%) 141.00
other 1308999 ( 26.20%) 1007394077 ( 37.00%) 769.59
udp 395016 ( 7.91%) 81009897 ( 2.98%) 205.08
dns 274197 ( 5.49%) 38002768 ( 1.40%) 138.60
rip 277 ( 0.01%) 30442 ( 0.00%) 109.90
realaud 24091 ( 0.48%) 11961818 ( 0.44%) 496.53
halflif 41 ( 0.00%) 2460 ( 0.00%) 60.00
starcra 13434 ( 0.27%) 881044 ( 0.03%) 65.58
quake 3 ( 0.00%) 207 ( 0.00%) 69.00
other 82880 ( 1.66%) 30066459 ( 1.10%) 362.77
icmp 103659 ( 2.07%) 27372502 ( 1.01%) 264.06
ipsec 64 ( 0.00%) 11904 ( 0.00%) 186.00
ip6 2200 ( 0.04%) 343007 ( 0.01%) 155.91
other 4064 ( 0.08%) 148514 ( 0.01%) 36.54
frag 8473 ( 0.17%) 10723479 ( 0.39%) 1265.61
tcpdump file: 200204251400.dump.gz (134.79 MB)