Traffic Trace Info
DumpFile: 200211171400.dump
FileSize: 328.32MB
Id: 200211171400
StartTime: Sun Nov 17 14:00:00 2002
EndTime: Sun Nov 17 14:21:57 2002
TotalTime: 1317.20 seconds
TotalCapSize: 252.44MB CapLen: 96 bytes
# of packets: 4972986 (2030.91MB)
AvgRate: 12.93Mbps stddev:1.00M
IP flow (unique src/dst pair) Information
# of flows: 236958 (avg. 20.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 5.1% 3.6% 3.4% 2.7% 2.5% 2.3% 2.2% 2.1% 1.9%
IP address Information
# of IPv4 addresses: 181636
Top 10 bandwidth usage (bytes/total in %):
9.9% 7.4% 6.4% 6.4% 6.1% 5.5% 5.1% 4.5% 4.2% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200211171400.pktlen.png)
detailed numbers
[ 16- 31]: 10968
[ 32- 63]: 2274961
[ 64- 127]: 874522
[ 128- 255]: 237625
[ 256- 511]: 188286
[ 512- 1023]: 273713
[ 1024- 2047]: 1112911
Protocol Breakdown
![[protocol breakdown chart]](200211171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4972986 (100.00%) 2129568640 (100.00%) 428.23
ip 4955603 ( 99.65%) 2129038772 ( 99.98%) 429.62
tcp 3620053 ( 72.79%) 1965499042 ( 92.30%) 542.95
http(s) 406069 ( 8.17%) 419208173 ( 19.69%) 1032.36
http(c) 573831 ( 11.54%) 59069294 ( 2.77%) 102.94
squid 1487 ( 0.03%) 597495 ( 0.03%) 401.81
smtp 62432 ( 1.26%) 17111937 ( 0.80%) 274.09
nntp 63 ( 0.00%) 6297 ( 0.00%) 99.95
ftp 17512 ( 0.35%) 9484820 ( 0.45%) 541.62
pop3 7001 ( 0.14%) 563634 ( 0.03%) 80.51
imap 425 ( 0.01%) 31457 ( 0.00%) 74.02
telnet 824 ( 0.02%) 102235 ( 0.00%) 124.07
ssh 9716 ( 0.20%) 1215759 ( 0.06%) 125.13
dns 131146 ( 2.64%) 7936896 ( 0.37%) 60.52
bgp 239 ( 0.00%) 51539 ( 0.00%) 215.64
napster 759894 ( 15.28%) 367693509 ( 17.27%) 483.87
realaud 10 ( 0.00%) 960 ( 0.00%) 96.00
rtsp 42769 ( 0.86%) 5530861 ( 0.26%) 129.32
icecast 7386 ( 0.15%) 484352 ( 0.02%) 65.58
hotline 12 ( 0.00%) 2548 ( 0.00%) 212.33
other 1599052 ( 32.15%) 1076400200 ( 50.55%) 673.15
udp 552758 ( 11.12%) 113035735 ( 5.31%) 204.49
dns 350246 ( 7.04%) 50805372 ( 2.39%) 145.06
realaud 4 ( 0.00%) 288 ( 0.00%) 72.00
other 202131 ( 4.06%) 62079713 ( 2.92%) 307.13
icmp 761880 ( 15.32%) 49601187 ( 2.33%) 65.10
ipsec 70 ( 0.00%) 13044 ( 0.00%) 186.34
ip6 817 ( 0.02%) 187494 ( 0.01%) 229.49
other 20025 ( 0.40%) 702270 ( 0.03%) 35.07
frag 39269 ( 0.79%) 42897909 ( 2.01%) 1092.41
tcpdump file: 200211171400.dump.gz (120.05 MB)