Traffic Trace Info
DumpFile: 200205171400.dump
FileSize: 337.54MB
Id: 200205171400
StartTime: Fri May 17 14:00:00 2002
EndTime: Fri May 17 14:14:13 2002
TotalTime: 853.16 seconds
TotalCapSize: 261.31MB CapLen: 96 bytes
# of packets: 4995822 (2554.15MB)
AvgRate: 25.11Mbps stddev:6.52M
IP flow (unique src/dst pair) Information
# of flows: 156782 (avg. 31.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.7% 2.5% 2.1% 2.1% 2.1% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 104240
Top 10 bandwidth usage (bytes/total in %):
6.9% 4.7% 3.4% 3.1% 2.9% 2.9% 2.7% 2.7% 2.6% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200205171400.pktlen.png)
detailed numbers
[ 16- 31]: 35943
[ 32- 63]: 1869500
[ 64- 127]: 816089
[ 128- 255]: 246025
[ 256- 511]: 229328
[ 512- 1023]: 328482
[ 1024- 2047]: 1470455
Protocol Breakdown
![[protocol breakdown chart]](200205171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4995822 (100.00%) 2678215638 (100.00%) 536.09
ip 4905964 ( 98.20%) 2675420805 ( 99.90%) 545.34
tcp 4341440 ( 86.90%) 2582634484 ( 96.43%) 594.88
http(s) 1074701 ( 21.51%) 1116935393 ( 41.70%) 1039.30
http(c) 999104 ( 20.00%) 101791981 ( 3.80%) 101.88
squid 72874 ( 1.46%) 79371063 ( 2.96%) 1089.15
smtp 179656 ( 3.60%) 54888337 ( 2.05%) 305.52
nntp 5 ( 0.00%) 328 ( 0.00%) 65.60
ftp 63807 ( 1.28%) 38419750 ( 1.43%) 602.12
pop3 8223 ( 0.16%) 886023 ( 0.03%) 107.75
imap 89 ( 0.00%) 6996 ( 0.00%) 78.61
telnet 2061 ( 0.04%) 312324 ( 0.01%) 151.54
ssh 4978 ( 0.10%) 945838 ( 0.04%) 190.00
dns 344 ( 0.01%) 22614 ( 0.00%) 65.74
bgp 226 ( 0.00%) 52125 ( 0.00%) 230.64
napster 784863 ( 15.71%) 540107799 ( 20.17%) 688.16
realaud 3873 ( 0.08%) 2732759 ( 0.10%) 705.59
rtsp 16760 ( 0.34%) 1681935 ( 0.06%) 100.35
icecast 8529 ( 0.17%) 5335956 ( 0.20%) 625.63
hotline 6705 ( 0.13%) 9816552 ( 0.37%) 1464.06
other 1114274 ( 22.30%) 629313178 ( 23.50%) 564.77
udp 409259 ( 8.19%) 67356205 ( 2.51%) 164.58
dns 235906 ( 4.72%) 32405780 ( 1.21%) 137.37
rip 183 ( 0.00%) 19418 ( 0.00%) 106.11
realaud 17693 ( 0.35%) 8820220 ( 0.33%) 498.51
starcra 32063 ( 0.64%) 2058749 ( 0.08%) 64.21
everque 1867 ( 0.04%) 112045 ( 0.00%) 60.01
quake 3 ( 0.00%) 180 ( 0.00%) 60.00
other 120432 ( 2.41%) 23715644 ( 0.89%) 196.92
icmp 146266 ( 2.93%) 24852547 ( 0.93%) 169.91
ipsec 40 ( 0.00%) 7440 ( 0.00%) 186.00
ip6 2203 ( 0.04%) 330673 ( 0.01%) 150.10
other 6756 ( 0.14%) 239456 ( 0.01%) 35.44
frag 7530 ( 0.15%) 6852153 ( 0.26%) 909.98
tcpdump file: 200205171400.dump.gz (136.09 MB)