Traffic Trace Info
DumpFile: 200212171400.dump
FileSize: 337.44MB
Id: 200212171400
StartTime: Tue Dec 17 14:00:00 2002
EndTime: Tue Dec 17 14:10:49 2002
TotalTime: 648.84 seconds
TotalCapSize: 261.89MB CapLen: 96 bytes
# of packets: 4950957 (1707.49MB)
AvgRate: 22.08Mbps stddev:1.93M
IP flow (unique src/dst pair) Information
# of flows: 457217 (avg. 10.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 1.4% 1.2% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 397696
Top 10 bandwidth usage (bytes/total in %):
4.0% 3.2% 3.1% 2.5% 2.3% 2.3% 2.0% 1.9% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200212171400.pktlen.png)
detailed numbers
[ 16- 31]: 21796
[ 32- 63]: 1780076
[ 64- 127]: 1260269
[ 128- 255]: 473651
[ 256- 511]: 266284
[ 512- 1023]: 356052
[ 1024- 2047]: 792829
Protocol Breakdown
![[protocol breakdown chart]](200212171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4950957 (100.00%) 1790433630 (100.00%) 361.63
ip 4917027 ( 99.31%) 1789400787 ( 99.94%) 363.92
tcp 3685742 ( 74.45%) 1612119558 ( 90.04%) 437.39
http(s) 1006952 ( 20.34%) 769595016 ( 42.98%) 764.28
http(c) 871283 ( 17.60%) 102126626 ( 5.70%) 117.21
squid 8618 ( 0.17%) 7386293 ( 0.41%) 857.08
smtp 145741 ( 2.94%) 24785312 ( 1.38%) 170.06
nntp 54 ( 0.00%) 4945 ( 0.00%) 91.57
ftp 61304 ( 1.24%) 28611706 ( 1.60%) 466.72
pop3 3249 ( 0.07%) 617693 ( 0.03%) 190.12
imap 486 ( 0.01%) 38545 ( 0.00%) 79.31
telnet 2133 ( 0.04%) 282907 ( 0.02%) 132.63
ssh 204558 ( 4.13%) 23988188 ( 1.34%) 117.27
dns 388 ( 0.01%) 25506 ( 0.00%) 65.74
bgp 128 ( 0.00%) 21541 ( 0.00%) 168.29
napster 682209 ( 13.78%) 365463113 ( 20.41%) 535.71
realaud 48 ( 0.00%) 3094 ( 0.00%) 64.46
rtsp 33029 ( 0.67%) 15975660 ( 0.89%) 483.69
icecast 314 ( 0.01%) 129793 ( 0.01%) 413.35
hotline 10 ( 0.00%) 1315 ( 0.00%) 131.50
other 664852 ( 13.43%) 273048014 ( 15.25%) 410.69
udp 1065664 ( 21.52%) 164027200 ( 9.16%) 153.92
dns 761623 ( 15.38%) 110569208 ( 6.18%) 145.18
rip 40 ( 0.00%) 3440 ( 0.00%) 86.00
realaud 25994 ( 0.53%) 17956956 ( 1.00%) 690.81
halflif 69 ( 0.00%) 5874 ( 0.00%) 85.13
everque 1 ( 0.00%) 92 ( 0.00%) 92.00
cuseeme 4 ( 0.00%) 376 ( 0.00%) 94.00
other 276191 ( 5.58%) 34176328 ( 1.91%) 123.74
icmp 122101 ( 2.47%) 11142922 ( 0.62%) 91.26
ip6 1111 ( 0.02%) 135498 ( 0.01%) 121.96
other 42409 ( 0.86%) 1975609 ( 0.11%) 46.58
frag 3483 ( 0.07%) 4073922 ( 0.23%) 1169.66
tcpdump file: 200212171400.dump.gz (136.63 MB)