Traffic Trace Info
DumpFile: 200209211400.dump
FileSize: 334.94MB
Id: 200209211400
StartTime: Sat Sep 21 14:00:00 2002
EndTime: Sat Sep 21 14:21:32 2002
TotalTime: 1291.65 seconds
TotalCapSize: 259.31MB CapLen: 96 bytes
# of packets: 4956998 (2503.34MB)
AvgRate: 16.26Mbps stddev:1.79M
IP flow (unique src/dst pair) Information
# of flows: 109449 (avg. 45.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 5.1% 4.4% 4.1% 2.9% 2.0% 1.9% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 64753
Top 10 bandwidth usage (bytes/total in %):
8.1% 7.1% 5.3% 5.2% 4.5% 4.4% 4.4% 4.4% 4.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200209211400.pktlen.png)
detailed numbers
[ 16- 31]: 11746
[ 32- 63]: 1724560
[ 64- 127]: 801892
[ 128- 255]: 327322
[ 256- 511]: 269166
[ 512- 1023]: 481373
[ 1024- 2047]: 1340939
Protocol Breakdown
![[protocol breakdown chart]](200209211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4956998 (100.00%) 2624939456 (100.00%) 529.54
ip 4939189 ( 99.64%) 2624398635 ( 99.98%) 531.34
tcp 4295853 ( 86.66%) 2436566160 ( 92.82%) 567.19
http(s) 853057 ( 17.21%) 975956825 ( 37.18%) 1144.07
http(c) 889741 ( 17.95%) 99463695 ( 3.79%) 111.79
squid 23586 ( 0.48%) 4037701 ( 0.15%) 171.19
smtp 85775 ( 1.73%) 27135661 ( 1.03%) 316.36
nntp 30 ( 0.00%) 2582 ( 0.00%) 86.07
ftp 178666 ( 3.60%) 122306956 ( 4.66%) 684.56
pop3 4928 ( 0.10%) 609299 ( 0.02%) 123.64
imap 895 ( 0.02%) 515648 ( 0.02%) 576.14
telnet 2115 ( 0.04%) 196590 ( 0.01%) 92.95
ssh 14221 ( 0.29%) 3159023 ( 0.12%) 222.14
dns 2298 ( 0.05%) 146717 ( 0.01%) 63.85
bgp 228 ( 0.00%) 38291 ( 0.00%) 167.94
napster 1094945 ( 22.09%) 584029187 ( 22.25%) 533.39
realaud 70 ( 0.00%) 5615 ( 0.00%) 80.21
rtsp 6602 ( 0.13%) 1050770 ( 0.04%) 159.16
icecast 250 ( 0.01%) 140234 ( 0.01%) 560.94
hotline 34961 ( 0.71%) 52209334 ( 1.99%) 1493.36
other 1103243 ( 22.26%) 565553120 ( 21.55%) 512.63
udp 531915 ( 10.73%) 172895080 ( 6.59%) 325.04
dns 275922 ( 5.57%) 39427865 ( 1.50%) 142.89
rip 128 ( 0.00%) 12708 ( 0.00%) 99.28
realaud 26995 ( 0.54%) 13279429 ( 0.51%) 491.92
halflif 3 ( 0.00%) 503 ( 0.00%) 167.67
everque 2 ( 0.00%) 469 ( 0.00%) 234.50
quake 15 ( 0.00%) 1255 ( 0.00%) 83.67
other 223434 ( 4.51%) 117130576 ( 4.46%) 524.23
icmp 65981 ( 1.33%) 8677096 ( 0.33%) 131.51
ipsec 61 ( 0.00%) 11195 ( 0.00%) 183.52
ip6 1352 ( 0.03%) 369231 ( 0.01%) 273.10
other 44027 ( 0.89%) 5879873 ( 0.22%) 133.55
frag 69485 ( 1.40%) 81540640 ( 3.11%) 1173.50
tcpdump file: 200209211400.dump.gz (132.93 MB)