Traffic Trace Info
DumpFile: 200211011400.dump
FileSize: 334.45MB
Id: 200211011400
StartTime: Fri Nov 1 14:00:00 2002
EndTime: Fri Nov 1 14:13:31 2002
TotalTime: 810.54 seconds
TotalCapSize: 258.88MB CapLen: 96 bytes
# of packets: 4952716 (2196.67MB)
AvgRate: 22.73Mbps stddev:1.72M
IP flow (unique src/dst pair) Information
# of flows: 275546 (avg. 17.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.6% 1.3% 1.2% 1.1% 1.1% 1.0% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 204516
Top 10 bandwidth usage (bytes/total in %):
4.0% 2.7% 2.2% 2.2% 1.9% 1.9% 1.8% 1.8% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200211011400.pktlen.png)
detailed numbers
[ 16- 31]: 22133
[ 32- 63]: 1685095
[ 64- 127]: 1058963
[ 128- 255]: 304296
[ 256- 511]: 297557
[ 512- 1023]: 471242
[ 1024- 2047]: 1113430
Protocol Breakdown
![[protocol breakdown chart]](200211011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4952716 (100.00%) 2303379908 (100.00%) 465.07
ip 4918256 ( 99.30%) 2302330942 ( 99.95%) 468.12
tcp 4094411 ( 82.67%) 2146540857 ( 93.19%) 524.26
http(s) 624879 ( 12.62%) 552549188 ( 23.99%) 884.25
http(c) 827792 ( 16.71%) 116170572 ( 5.04%) 140.34
squid 3333 ( 0.07%) 1455019 ( 0.06%) 436.55
smtp 106065 ( 2.14%) 51966167 ( 2.26%) 489.95
nntp 11 ( 0.00%) 775 ( 0.00%) 70.45
ftp 150684 ( 3.04%) 77488620 ( 3.36%) 514.25
pop3 5033 ( 0.10%) 545971 ( 0.02%) 108.48
imap 424 ( 0.01%) 31986 ( 0.00%) 75.44
telnet 1464 ( 0.03%) 240934 ( 0.01%) 164.57
ssh 36659 ( 0.74%) 16961774 ( 0.74%) 462.69
dns 31498 ( 0.64%) 1985168 ( 0.09%) 63.03
bgp 141 ( 0.00%) 18760 ( 0.00%) 133.05
napster 1111995 ( 22.45%) 605503809 ( 26.29%) 544.52
realaud 5956 ( 0.12%) 1695755 ( 0.07%) 284.71
rtsp 23447 ( 0.47%) 1485083 ( 0.06%) 63.34
icecast 438 ( 0.01%) 168187 ( 0.01%) 383.99
hotline 6 ( 0.00%) 789 ( 0.00%) 131.50
other 1164182 ( 23.51%) 718257446 ( 31.18%) 616.96
udp 668430 ( 13.50%) 144575492 ( 6.28%) 216.29
dns 285180 ( 5.76%) 41837859 ( 1.82%) 146.71
rip 70 ( 0.00%) 6520 ( 0.00%) 93.14
realaud 31781 ( 0.64%) 17847565 ( 0.77%) 561.58
halflif 3 ( 0.00%) 207 ( 0.00%) 69.00
everque 1 ( 0.00%) 73 ( 0.00%) 73.00
quake 1 ( 0.00%) 77 ( 0.00%) 77.00
other 344294 ( 6.95%) 75396646 ( 3.27%) 218.99
icmp 113771 ( 2.30%) 9480428 ( 0.41%) 83.33
ipsec 39 ( 0.00%) 7290 ( 0.00%) 186.92
ip6 1299 ( 0.03%) 340041 ( 0.01%) 261.77
other 40306 ( 0.81%) 1386834 ( 0.06%) 34.41
frag 32457 ( 0.66%) 40594796 ( 1.76%) 1250.73
tcpdump file: 200211011400.dump.gz (142.03 MB)