Traffic Trace Info
DumpFile: 200210281400.dump
FileSize: 333.49MB
Id: 200210281400
StartTime: Mon Oct 28 14:00:00 2002
EndTime: Mon Oct 28 14:11:26 2002
TotalTime: 686.08 seconds
TotalCapSize: 258.21MB CapLen: 96 bytes
# of packets: 4933613 (2102.90MB)
AvgRate: 25.71Mbps stddev:1.18M
IP flow (unique src/dst pair) Information
# of flows: 235381 (avg. 20.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 1.8% 1.6% 1.6% 1.6% 1.4% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 178010
Top 10 bandwidth usage (bytes/total in %):
4.1% 3.9% 3.1% 3.1% 2.5% 2.1% 2.1% 1.9% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200210281400.pktlen.png)
detailed numbers
[ 16- 31]: 25154
[ 32- 63]: 1693169
[ 64- 127]: 1120618
[ 128- 255]: 293406
[ 256- 511]: 280792
[ 512- 1023]: 471954
[ 1024- 2047]: 1048520
Protocol Breakdown
![[protocol breakdown chart]](200210281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4933613 (100.00%) 2205054305 (100.00%) 446.95
ip 4893883 ( 99.19%) 2203843390 ( 99.95%) 450.33
tcp 4083671 ( 82.77%) 1997731407 ( 90.60%) 489.20
http(s) 733392 ( 14.87%) 677967690 ( 30.75%) 924.43
http(c) 828210 ( 16.79%) 105913141 ( 4.80%) 127.88
squid 32362 ( 0.66%) 23800395 ( 1.08%) 735.44
smtp 100995 ( 2.05%) 43043274 ( 1.95%) 426.19
nntp 227397 ( 4.61%) 78568420 ( 3.56%) 345.51
ftp 135211 ( 2.74%) 24810100 ( 1.13%) 183.49
pop3 6210 ( 0.13%) 1209896 ( 0.05%) 194.83
imap 758 ( 0.02%) 67108 ( 0.00%) 88.53
telnet 2165 ( 0.04%) 251824 ( 0.01%) 116.32
ssh 80843 ( 1.64%) 44912347 ( 2.04%) 555.55
dns 10808 ( 0.22%) 862475 ( 0.04%) 79.80
bgp 313 ( 0.01%) 200266 ( 0.01%) 639.83
napster 724168 ( 14.68%) 317988946 ( 14.42%) 439.11
realaud 7903 ( 0.16%) 476756 ( 0.02%) 60.33
rtsp 18570 ( 0.38%) 9923271 ( 0.45%) 534.37
icecast 29 ( 0.00%) 4331 ( 0.00%) 149.34
hotline 11 ( 0.00%) 1537 ( 0.00%) 139.73
other 1173868 ( 23.79%) 667712882 ( 30.28%) 568.81
udp 646458 ( 13.10%) 193433805 ( 8.77%) 299.22
dns 235019 ( 4.76%) 32632239 ( 1.48%) 138.85
rip 66 ( 0.00%) 6456 ( 0.00%) 97.82
realaud 55503 ( 1.12%) 31022179 ( 1.41%) 558.93
halflif 1 ( 0.00%) 60 ( 0.00%) 60.00
quake 3 ( 0.00%) 259 ( 0.00%) 86.33
cuseeme 1 ( 0.00%) 81 ( 0.00%) 81.00
other 354902 ( 7.19%) 128470338 ( 5.83%) 361.99
icmp 98538 ( 2.00%) 8499568 ( 0.39%) 86.26
ipsec 32 ( 0.00%) 5952 ( 0.00%) 186.00
ip6 820 ( 0.02%) 218782 ( 0.01%) 266.81
other 64364 ( 1.30%) 3953876 ( 0.18%) 61.43
frag 77260 ( 1.57%) 100615066 ( 4.56%) 1302.29
tcpdump file: 200210281400.dump.gz (140.33 MB)