Article Figure 1 Figure 2 Figure 3 Figure 4
Figure 5 Listing 1 apr2004.tar

Listing 1 Tcpdstat output

#tcpdstat pcap.lpc

### Protocol Breakdown ###
<<<<
     protocol              packets                    bytes              bytes/pkt
------------------------------------------------------------------------------------
[0] total               69121 (100.00%)            17438769 (100.00%)       252.29
[1] ip                  68304 ( 98.82%)            17374989 ( 99.63%)       254.38
[2]  tcp                56271 ( 81.41%)            14814623 ( 84.95%)       263.27
[3]   http(s)            9347 ( 13.52%)             6472958 ( 37.12%)       692.52
[3]   http(c)           10856 ( 15.71%)             1831038 ( 10.50%)       168.67
[3]   squid                31 (  0.04%)                3698 (  0.02%)       119.29
...
[3]   other             28849 ( 41.74%)             4784379 ( 27.44%)       165.84
[2]  udp                11978 ( 17.33%)             2555824 ( 14.66%)       213.38
[3]   dns                1261 (  1.82%)              226683 (  1.30%)       179.76
...
[3]   other             10382 ( 15.02%)             2037367 ( 11.68%)       196.24
[2]  icmp                  55 (  0.08%)                4542 (  0.03%)        82.58
[2]  frag                 283 (  0.41%)              392574 (  2.25%)      1387.19