Traffic Trace Info
DumpFile: 200204301400.dump
FileSize: 344.96MB
Id: 200204301400
StartTime: Tue Apr 30 14:00:00 2002
EndTime: Tue Apr 30 14:18:46 2002
TotalTime: 1125.09 seconds
TotalCapSize: 268.72MB CapLen: 96 bytes
# of packets: 4996317 (2487.36MB)
AvgRate: 18.55Mbps stddev:3.08M
IP flow (unique src/dst pair) Information
# of flows: 131491 (avg. 38.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.2% 2.9% 1.3% 1.3% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 76255
Top 10 bandwidth usage (bytes/total in %):
3.9% 3.5% 3.3% 3.3% 3.3% 3.2% 3.2% 3.0% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200204301400.pktlen.png)
detailed numbers
[ 16- 31]: 23796
[ 32- 63]: 1485406
[ 64- 127]: 1240979
[ 128- 255]: 226805
[ 256- 511]: 285778
[ 512- 1023]: 339327
[ 1024- 2047]: 1394226
Protocol Breakdown
![[protocol breakdown chart]](200204301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4996317 (100.00%) 2608185672 (100.00%) 522.02
ip 4939508 ( 98.86%) 2606423557 ( 99.93%) 527.67
tcp 4374075 ( 87.55%) 2479907038 ( 95.08%) 566.96
http(s) 1070936 ( 21.43%) 1058204399 ( 40.57%) 988.11
http(c) 816115 ( 16.33%) 89329290 ( 3.42%) 109.46
squid 5946 ( 0.12%) 2609894 ( 0.10%) 438.93
smtp 150102 ( 3.00%) 56448981 ( 2.16%) 376.07
nntp 382892 ( 7.66%) 34043190 ( 1.31%) 88.91
ftp 120609 ( 2.41%) 39090891 ( 1.50%) 324.11
pop3 8520 ( 0.17%) 1610594 ( 0.06%) 189.04
imap 263 ( 0.01%) 21236 ( 0.00%) 80.75
telnet 1424 ( 0.03%) 136092 ( 0.01%) 95.57
ssh 2845 ( 0.06%) 1516625 ( 0.06%) 533.08
dns 1196 ( 0.02%) 84862 ( 0.00%) 70.95
bgp 294 ( 0.01%) 50930 ( 0.00%) 173.23
napster 326628 ( 6.54%) 212699660 ( 8.16%) 651.20
realaud 71 ( 0.00%) 5531 ( 0.00%) 77.90
rtsp 6109 ( 0.12%) 769167 ( 0.03%) 125.91
icecast 8420 ( 0.17%) 7443512 ( 0.29%) 884.03
hotline 8 ( 0.00%) 1052 ( 0.00%) 131.50
other 1471379 ( 29.45%) 975829331 ( 37.41%) 663.21
udp 467319 ( 9.35%) 106197458 ( 4.07%) 227.25
dns 355084 ( 7.11%) 60108687 ( 2.30%) 169.28
rip 134 ( 0.00%) 14924 ( 0.00%) 111.37
realaud 24829 ( 0.50%) 17101205 ( 0.66%) 688.76
halflif 9895 ( 0.20%) 2196876 ( 0.08%) 222.02
starcra 11 ( 0.00%) 660 ( 0.00%) 60.00
everque 395 ( 0.01%) 25022 ( 0.00%) 63.35
quake 23386 ( 0.47%) 2005184 ( 0.08%) 85.74
other 53517 ( 1.07%) 24732559 ( 0.95%) 462.14
icmp 90692 ( 1.82%) 19704447 ( 0.76%) 217.27
ipsec 52 ( 0.00%) 9672 ( 0.00%) 186.00
ip6 2992 ( 0.06%) 441814 ( 0.02%) 147.67
other 4378 ( 0.09%) 163128 ( 0.01%) 37.26
frag 4800 ( 0.10%) 5236999 ( 0.20%) 1091.04
tcpdump file: 200204301400.dump.gz (136.32 MB)