Traffic Trace Info
DumpFile: 200204271400.dump
FileSize: 337.45MB
Id: 200204271400
StartTime: Sat Apr 27 14:00:00 2002
EndTime: Sat Apr 27 14:27:18 2002
TotalTime: 1638.55 seconds
TotalCapSize: 261.19MB CapLen: 96 bytes
# of packets: 4996887 (2279.78MB)
AvgRate: 11.67Mbps stddev:2.16M
IP flow (unique src/dst pair) Information
# of flows: 118740 (avg. 42.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.0% 2.2% 2.0% 1.9% 1.4% 1.4% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 67834
Top 10 bandwidth usage (bytes/total in %):
7.4% 5.7% 3.2% 3.2% 3.0% 3.0% 2.8% 2.6% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200204271400.pktlen.png)
detailed numbers
[ 16- 31]: 13061
[ 32- 63]: 1898458
[ 64- 127]: 920674
[ 128- 255]: 289778
[ 256- 511]: 263146
[ 512- 1023]: 386079
[ 1024- 2047]: 1225691
Protocol Breakdown
![[protocol breakdown chart]](200204271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4996887 (100.00%) 2390525546 (100.00%) 478.40
ip 4967427 ( 99.41%) 2389615079 ( 99.96%) 481.06
tcp 4210504 ( 84.26%) 2110645104 ( 88.29%) 501.28
http(s) 1062139 ( 21.26%) 1084324530 ( 45.36%) 1020.89
http(c) 1257645 ( 25.17%) 121810724 ( 5.10%) 96.86
squid 5125 ( 0.10%) 1943911 ( 0.08%) 379.30
smtp 99845 ( 2.00%) 32877829 ( 1.38%) 329.29
nntp 11 ( 0.00%) 715 ( 0.00%) 65.00
ftp 38393 ( 0.77%) 39611782 ( 1.66%) 1031.74
pop3 9680 ( 0.19%) 2023547 ( 0.08%) 209.04
imap 1634 ( 0.03%) 115849 ( 0.00%) 70.90
telnet 2104 ( 0.04%) 197163 ( 0.01%) 93.71
ssh 3728 ( 0.07%) 508492 ( 0.02%) 136.40
dns 1712 ( 0.03%) 127220 ( 0.01%) 74.31
bgp 372 ( 0.01%) 66686 ( 0.00%) 179.26
napster 400494 ( 8.01%) 261580953 ( 10.94%) 653.15
realaud 111 ( 0.00%) 8300 ( 0.00%) 74.77
rtsp 29348 ( 0.59%) 1803058 ( 0.08%) 61.44
icecast 10393 ( 0.21%) 852480 ( 0.04%) 82.02
hotline 12 ( 0.00%) 1578 ( 0.00%) 131.50
other 1287512 ( 25.77%) 562780254 ( 23.54%) 437.11
udp 615967 ( 12.33%) 218785960 ( 9.15%) 355.19
dns 363195 ( 7.27%) 48097360 ( 2.01%) 132.43
rip 265 ( 0.01%) 30190 ( 0.00%) 113.92
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
halflif 59 ( 0.00%) 3540 ( 0.00%) 60.00
everque 365 ( 0.01%) 45879 ( 0.00%) 125.70
quake 10 ( 0.00%) 600 ( 0.00%) 60.00
other 237582 ( 4.75%) 156397142 ( 6.54%) 658.29
icmp 112137 ( 2.24%) 32293837 ( 1.35%) 287.99
ipsec 76 ( 0.00%) 14136 ( 0.00%) 186.00
ip6 26253 ( 0.53%) 27758252 ( 1.16%) 1057.34
other 2490 ( 0.05%) 117790 ( 0.00%) 47.31
frag 132971 ( 2.66%) 148278874 ( 6.20%) 1115.12
tcpdump file: 200204271400.dump.gz (130.55 MB)