Traffic Trace Info
DumpFile: 200212011400.dump
FileSize: 338.50MB
Id: 200212011400
StartTime: Sun Dec 1 14:00:00 2002
EndTime: Sun Dec 1 14:21:22 2002
TotalTime: 1281.34 seconds
TotalCapSize: 262.40MB CapLen: 96 bytes
# of packets: 4987536 (1589.13MB)
AvgRate: 10.40Mbps stddev:1.12M
IP flow (unique src/dst pair) Information
# of flows: 205165 (avg. 24.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.6% 3.7% 3.1% 2.4% 1.9% 1.7% 1.7% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 166687
Top 10 bandwidth usage (bytes/total in %):
10.3% 7.6% 6.7% 6.2% 5.4% 5.4% 5.1% 4.6% 4.6% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200212011400.pktlen.png)
detailed numbers
[ 16- 31]: 8970
[ 32- 63]: 1297452
[ 64- 127]: 1291722
[ 128- 255]: 1054786
[ 256- 511]: 456280
[ 512- 1023]: 203891
[ 1024- 2047]: 674435
Protocol Breakdown
![[protocol breakdown chart]](200212011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4987536 (100.00%) 1666320159 (100.00%) 334.10
ip 4973269 ( 99.71%) 1665884895 ( 99.97%) 334.97
tcp 2524589 ( 50.62%) 1184120198 ( 71.06%) 469.03
http(s) 343224 ( 6.88%) 326754487 ( 19.61%) 952.02
http(c) 349478 ( 7.01%) 30347290 ( 1.82%) 86.84
squid 45205 ( 0.91%) 64155547 ( 3.85%) 1419.21
smtp 111479 ( 2.24%) 16558452 ( 0.99%) 148.53
nntp 15 ( 0.00%) 2455 ( 0.00%) 163.67
ftp 274565 ( 5.51%) 90206398 ( 5.41%) 328.54
pop3 7587 ( 0.15%) 665732 ( 0.04%) 87.75
imap 109 ( 0.00%) 10665 ( 0.00%) 97.84
telnet 1244 ( 0.02%) 82207 ( 0.00%) 66.08
ssh 4691 ( 0.09%) 376332 ( 0.02%) 80.22
dns 14425 ( 0.29%) 6706348 ( 0.40%) 464.91
bgp 229 ( 0.00%) 38653 ( 0.00%) 168.79
napster 509575 ( 10.22%) 203975449 ( 12.24%) 400.29
realaud 979 ( 0.02%) 60271 ( 0.00%) 61.56
rtsp 343 ( 0.01%) 98744 ( 0.01%) 287.88
icecast 29551 ( 0.59%) 7296382 ( 0.44%) 246.91
other 831801 ( 16.68%) 436781542 ( 26.21%) 525.10
udp 2245262 ( 45.02%) 416115574 ( 24.97%) 185.33
dns 1933455 ( 38.77%) 352569686 ( 21.16%) 182.35
realaud 22136 ( 0.44%) 10425621 ( 0.63%) 470.98
halflif 64 ( 0.00%) 3930 ( 0.00%) 61.41
everque 3 ( 0.00%) 212 ( 0.00%) 70.67
quake 3 ( 0.00%) 180 ( 0.00%) 60.00
other 289364 ( 5.80%) 53107330 ( 3.19%) 183.53
icmp 125120 ( 2.51%) 13872673 ( 0.83%) 110.87
ipsec 285 ( 0.01%) 35526 ( 0.00%) 124.65
ip6 61627 ( 1.24%) 51183602 ( 3.07%) 830.54
other 16386 ( 0.33%) 557322 ( 0.03%) 34.01
frag 16574 ( 0.33%) 23939238 ( 1.44%) 1444.39
tcpdump file: 200212011400.dump.gz (117.75 MB)