Traffic Trace Info
DumpFile: 200204291400.dump
FileSize: 339.97MB
Id: 200204291400
StartTime: Mon Apr 29 14:00:00 2002
EndTime: Mon Apr 29 14:27:15 2002
TotalTime: 1635.33 seconds
TotalCapSize: 263.73MB CapLen: 96 bytes
# of packets: 4996811 (2355.24MB)
AvgRate: 12.08Mbps stddev:1.93M
IP flow (unique src/dst pair) Information
# of flows: 149017 (avg. 33.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 4.2% 2.1% 1.9% 1.6% 1.5% 1.5% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 95330
Top 10 bandwidth usage (bytes/total in %):
5.6% 5.5% 4.5% 4.2% 4.2% 3.2% 2.7% 2.4% 2.3% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200204291400.pktlen.png)
detailed numbers
[ 16- 31]: 14104
[ 32- 63]: 1727921
[ 64- 127]: 1033732
[ 128- 255]: 349190
[ 256- 511]: 219839
[ 512- 1023]: 330462
[ 1024- 2047]: 1321563
Protocol Breakdown
![[protocol breakdown chart]](200204291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4996811 (100.00%) 2469645062 (100.00%) 494.24
ip 4963641 ( 99.34%) 2468617179 ( 99.96%) 497.34
tcp 4224870 ( 84.55%) 2297285598 ( 93.02%) 543.75
http(s) 879123 ( 17.59%) 870027441 ( 35.23%) 989.65
http(c) 986380 ( 19.74%) 97219961 ( 3.94%) 98.56
squid 40107 ( 0.80%) 48621171 ( 1.97%) 1212.29
smtp 195536 ( 3.91%) 84727017 ( 3.43%) 433.31
nntp 6524 ( 0.13%) 2211529 ( 0.09%) 338.98
ftp 74461 ( 1.49%) 54946510 ( 2.22%) 737.92
pop3 8500 ( 0.17%) 1323804 ( 0.05%) 155.74
imap 745 ( 0.01%) 62123 ( 0.00%) 83.39
telnet 1072 ( 0.02%) 135014 ( 0.01%) 125.95
ssh 58558 ( 1.17%) 4545116 ( 0.18%) 77.62
dns 1354 ( 0.03%) 148994 ( 0.01%) 110.04
bgp 678 ( 0.01%) 163601 ( 0.01%) 241.30
napster 644556 ( 12.90%) 397347761 ( 16.09%) 616.47
realaud 4307 ( 0.09%) 262246 ( 0.01%) 60.89
rtsp 19179 ( 0.38%) 1180832 ( 0.05%) 61.57
icecast 1557 ( 0.03%) 389851 ( 0.02%) 250.39
hotline 33 ( 0.00%) 8233 ( 0.00%) 249.48
other 1301969 ( 26.06%) 733955967 ( 29.72%) 563.73
udp 609296 ( 12.19%) 131042857 ( 5.31%) 215.07
dns 481613 ( 9.64%) 64788587 ( 2.62%) 134.52
rip 277 ( 0.01%) 32742 ( 0.00%) 118.20
realaud 1154 ( 0.02%) 254604 ( 0.01%) 220.63
halflif 32 ( 0.00%) 1920 ( 0.00%) 60.00
everque 181 ( 0.00%) 41495 ( 0.00%) 229.25
quake 4 ( 0.00%) 268 ( 0.00%) 67.00
other 125577 ( 2.51%) 65727023 ( 2.66%) 523.40
icmp 123184 ( 2.47%) 39595873 ( 1.60%) 321.44
ipip 12 ( 0.00%) 7776 ( 0.00%) 648.00
ipsec 96 ( 0.00%) 17856 ( 0.00%) 186.00
ip6 3752 ( 0.08%) 584516 ( 0.02%) 155.79
other 2431 ( 0.05%) 82703 ( 0.00%) 34.02
frag 47266 ( 0.95%) 51501455 ( 2.09%) 1089.61
tcpdump file: 200204291400.dump.gz (132.22 MB)