Traffic Trace Info
DumpFile: 200205131400.dump
FileSize: 344.13MB
Id: 200205131400
StartTime: Mon May 13 14:00:00 2002
EndTime: Mon May 13 14:09:40 2002
TotalTime: 579.71 seconds
TotalCapSize: 267.89MB CapLen: 96 bytes
# of packets: 4996345 (1576.80MB)
AvgRate: 22.82Mbps stddev:2.35M
IP flow (unique src/dst pair) Information
# of flows: 1068313 (avg. 4.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 4.3% 3.0% 2.1% 1.6% 1.4% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1032966
Top 10 bandwidth usage (bytes/total in %):
8.0% 5.3% 4.9% 4.8% 4.4% 4.4% 4.2% 3.0% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200205131400.pktlen.png)
detailed numbers
[ 16- 31]: 25909
[ 32- 63]: 3222167
[ 64- 127]: 445142
[ 128- 255]: 133035
[ 256- 511]: 133184
[ 512- 1023]: 213797
[ 1024- 2047]: 823111
Protocol Breakdown
![[protocol breakdown chart]](200205131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4996345 (100.00%) 1653393204 (100.00%) 330.92
ip 4917372 ( 98.42%) 1650910187 ( 99.85%) 335.73
tcp 4641066 ( 92.89%) 1600439442 ( 96.80%) 344.84
http(s) 669733 ( 13.40%) 640097299 ( 38.71%) 955.75
http(c) 599672 ( 12.00%) 64216450 ( 3.88%) 107.09
squid 36256 ( 0.73%) 50062906 ( 3.03%) 1380.82
smtp 77900 ( 1.56%) 27023966 ( 1.63%) 346.91
nntp 19768 ( 0.40%) 1190357 ( 0.07%) 60.22
ftp 53242 ( 1.07%) 16251041 ( 0.98%) 305.23
pop3 4582 ( 0.09%) 1267767 ( 0.08%) 276.68
imap 149 ( 0.00%) 11691 ( 0.00%) 78.46
telnet 1515 ( 0.03%) 262252 ( 0.02%) 173.10
ssh 2324 ( 0.05%) 289782 ( 0.02%) 124.69
dns 182 ( 0.00%) 13197 ( 0.00%) 72.51
bgp 135 ( 0.00%) 27075 ( 0.00%) 200.56
napster 280364 ( 5.61%) 168143191 ( 10.17%) 599.73
realaud 1501 ( 0.03%) 1303507 ( 0.08%) 868.43
rtsp 8851 ( 0.18%) 3817776 ( 0.23%) 431.34
icecast 219 ( 0.00%) 15623 ( 0.00%) 71.34
hotline 8 ( 0.00%) 1052 ( 0.00%) 131.50
other 2884156 ( 57.73%) 626426090 ( 37.89%) 217.20
udp 185009 ( 3.70%) 34091285 ( 2.06%) 184.27
dns 147533 ( 2.95%) 21553349 ( 1.30%) 146.09
rip 102 ( 0.00%) 12832 ( 0.00%) 125.80
realaud 10174 ( 0.20%) 6592784 ( 0.40%) 648.00
halflif 5 ( 0.00%) 300 ( 0.00%) 60.00
starcra 2520 ( 0.05%) 155660 ( 0.01%) 61.77
everque 748 ( 0.01%) 46996 ( 0.00%) 62.83
quake 3 ( 0.00%) 180 ( 0.00%) 60.00
other 23895 ( 0.48%) 5727730 ( 0.35%) 239.70
icmp 82348 ( 1.65%) 15721844 ( 0.95%) 190.92
ipsec 23 ( 0.00%) 4266 ( 0.00%) 185.48
ip6 2100 ( 0.04%) 421118 ( 0.03%) 200.53
other 6826 ( 0.14%) 232232 ( 0.01%) 34.02
frag 18 ( 0.00%) 11076 ( 0.00%) 615.33
tcpdump file: 200205131400.dump.gz (135.20 MB)