



We present the stratification of traffic by application as a percentage
of total bytes analyzed. The trace is still dominated by WWW traffic
but this is quite a bit less than in our 10/29/2001 trace. We note an
increase in p2p traffic from the previous trace. Data sampled on 1/9/2002.
Direction = 0 Applications | Direction = 0 Percentage Traffic | Direction = 1 Applications | Direction = 1 Percentage Traffic |
"WWW" | 39.1585398652422 | "WWW" | 53.2297991871413 |
"FASTTRACK" | 29.1582013605691 | "Unclassified_TCP" | 15.1087676856762 |
"Unclassified_TCP" | 10.5869588637174 | "EDONKEY_TCP" | 9.59095313565473 |
"EDONKEY_TCP" | 3.35423079001429 | "FTP_DATA" | 5.16542752775284 |
"NAPSTER_DATA" | 3.30097240102051 | "FASTTRACK" | 3.8650084384513 |
"SMTP" | 2.1242369139964 | "NNTP" | 2.67422971331297 |
"GNUTELLA" | 2.07687214541172 | "Unclassified_UDP" | 2.2701566239652 |
"Unclassified_UDP" | 1.75299774039548 | "MS_MEDIA" | 1.74821923766606 |
"No_Ports_UDP" | 1.41214214202599 | "SMTP" | 1.39400828648156 |
"FTP_DATA" | 0.895093556718037 | "SHOUTCAST" | 1.02318694305408 |
"REALAUDIO_UDP" | 0.708028184187465 | "No_Ports_UDP" | 0.70102566636142 |
"DNS" | 0.685576041229732 | "GNUTELLA" | 0.433892998117528 |
"MS_MEDIA" | 0.617342555674578 | "ESP" | 0.388727742922287 |
"NNTP" | 0.398641140622051 | "NAPSTER_DATA" | 0.360457850346781 |
"HTTPS" | 0.375404889009948 | "DNS" | 0.355522038574275 |
"ASHERONS" | 0.350301368719271 | "HTTPS" | 0.307786437706721 |
"RTSP" | 0.319883846893444 | "POP" | 0.239780281471985 |
"ICMP" | 0.28971304210442 | "REALAUDIO_UDP" | 0.237580801206812 |
"SQUID" | 0.273149356157932 | "HALFLIFE" | 0.114376190940751 |
"ESP" | 0.246628689143057 | "IRC" | 0.0884075132301714 |
"HOTLINE" | 0.227506100121992 | "QUAKE" | 0.0746017554215266 |
"HALFLIFE" | 0.223976237933218 | "NETBIOS" | 0.0662186382994278 |
"FTP_CONTROL" | 0.185232496750733 | "FTP_CONTROL" | 0.0573381812318795 |
"QUAKE" | 0.14370151632928 | "SSH" | 0.051177227172389 |
"GRE" | 0.113526605540367 | "RTSP" | 0.0427374406110035 |
"SHOUTCAST" | 0.11319819421146 | "ICMP_ECHO" | 0.0419161656158 |
"POP" | 0.112664414225903 | "NAPSTER_CONTROL" | 0.0417953826403494 |
"X11" | 0.0940117836703835 | "SQL" | 0.0347621439967072 |
"IRC" | 0.0911190930162092 | "HOTLINE" | 0.0295827516937198 |
"ICMP_ECHO" | 0.0885347917918178 | "ICMP_ECHOREPLY" | 0.0286803256108061 |
"STARCRAFT" | 0.0603012375744582 | "GRE" | 0.0265100179434447 |
"NETBIOS" | 0.0549089693645031 | "REALAUDIO_TCP" | 0.0166476290008996 |
"SSH" | 0.0475991614422167 | "STARCRAFT" | 0.0153997429950589 |
"ICMP_ECHOREPLY" | 0.0407954955945299 | "SQUID" | 0.0152447618218643 |
"MS_NETMEET" | 0.036386433089745 | "MS_NETMEET" | 0.0141707659967341 |
"TELNET" | 0.0326366623356836 | "NFS" | 0.0139472507289498 |
"ICMP_TIMXCEED_INTRANS" | 0.0323124888381002 | "SNMP" | 0.0128255000209052 |
"SQL" | 0.024481369986775 | "TELNET" | 0.0101091282069599 |
"NAPSTER_CONTROL" | 0.0198227086924224 | "APPLETALK_IP" | 0.00956577297724401 |
"CUSEEME" | 0.0178311167914591 | "ICMP_TIMXCEED_INTRANS" | 0.00785930807119528 |
"SNMP" | 0.0171996806108849 | "ICMP_UNREACH_HOST" | 0.00763528665489576 |
"NFS" | 0.0168105375612132 | "IMESH_DTA" | 0.00748838466352473 |
"RSYNC" | 0.0141989753813722 | "RSYNC" | 0.00721341165880766 |
"ICMP_UNREACH_HOST" | 0.0124993166393998 | "KERBEROS" | 0.00698938440072809 |
"AOL" | 0.0119069094296759 | "AOL" | 0.00668558596684256 |
"ICMP_UNREACH_PORT" | 0.0105692968845966 | "IMESH_CTL" | 0.00528688189064038 |
"NTP" | 0.00925896589362865 | "ASHERONS" | 0.00528618171157313 |
"BLACKWHITE_TCP" | 0.00657012165500908 | "RPC" | 0.00518341937579912 |
"UNREAL" | 0.0058448393452015 | "ICMP_UNREACH_PORT" | 0.00467319454988626 |
"IP_in_IP" | 0.00482540334067721 | "BLACKWHITE_TCP" | 0.00397864445499488 |
"BGP" | 0.00456253626651867 | "EDONKEY_UDP" | 0.00388193628971357 |
"IMESH_DTA" | 0.00432182991918527 | "BGP" | 0.00292553883536103 |
"KERBEROS" | 0.00428781191609231 | "UNREAL" | 0.00254643484925579 |
"IDENT" | 0.00425956840448191 | "ICMP" | 0.00250401017337652 |
"SKIP" | 0.00389419346386614 | "PORTDOOM" | 0.00243283934962962 |
"REALAUDIO_TCP" | 0.00386724972780585 | "IDENT" | 0.00233938088314195 |
"IMESH_CTL" | 0.00332870252532039 | "IMAP" | 0.00227560617022163 |
"PORTDOOM" | 0.00263292917157058 | "X11" | 0.00218385016535158 |
"IMAP" | 0.0025294394355747 | "Other_Protocol_41" | 0.00179072423802116 |
"EDONKEY_UDP" | 0.00153415192872479 | "SKIP" | 0.00131464586837184 |
"RPC" | 0.00133814467717194 | "AH" | 0.00125005580986308 |
"ISAKMP" | 0.00133582183475987 | "NTP" | 0.00115236956369163 |
"TRACEROUTE" | 0.000565392064969827 | "AT_BACKUP" | 0.00104201166202899 |
"SMTPS" | 0.000514865607808486 | "TIMESERVER" | 0.000604949289593645 |
"BLACKWHITE_UDP" | 0.000488887948979587 | "IPIP" | 0.000508752280067621 |
"DIALPAD_DATA" | 0.000485697216289998 | "IP_in_IP" | 0.000497147583977466 |
"Other_Protocol_41" | 0.00047382208784876 | "ISAKMP" | 0.000326755794983229 |
"EVERQUEST" | 0.000445535319048894 | "DIALPAD_DATA" | 0.00031494204662091 |
"AH" | 0.000444314505035103 | "SQUID_ICP" | 0.000256087781591533 |
"SQUID_ICP" | 0.000410311607627355 | "L2TP" | 0.000236248679236119 |
"ICMP_UNREACH_NET" | 0.000402673623887526 | "LPR" | 0.000130836678934683 |
"No_Ports_TCP" | 0.000380797158593147 | "LDAP" | 0.000126096491685603 |
"LDAP" | 0.000269809509756659 | "CUSEEME" | 0.000112116694730856 |
"TIMESERVER" | 0.000253933434600931 | "ICMP_UNREACH_NET" | 9.04891731369249e-05 |
"L2TP" | 0.000167455446639751 | "BLACKWHITE_UDP" | 8.87604235090254e-05 |
"SLP" | 0.000160396285292288 | "No_Ports_TCP" | 5.92523406134987e-05 |
"RSHELL" | 0.000158820487676061 | "ICMP_UNREACH_PROTOCOL" | 3.49956007223444e-05 |
"POINTCAST" | 0.000152492578817174 | "RSHELL" | 3.35030259168903e-05 |
"GOPHER" | 0.000146783316429843 | "CHARGEN" | 1.71051492871067e-05 |
"ECHO" | 0.000134851198358039 | "DOOM" | 1.55090915205811e-05 |
"DAYTIME" | 0.000128631089161788 | "TRACEROUTE" | 1.4082862645814e-05 |
"WHOIS" | 0.000121301398724654 | "POINTCAST" | 1.36827007116707e-05 |
"DISCARD" | 8.97847597780645e-05 | "DAYTIME" | 1.08114658119419e-05 |
"SYSTAT" | 8.26734151544216e-05 | "WHOIS" | 9.45951099794378e-06 |
"CHARGEN" | 7.97676306176584e-05 | "ROMNET" | 6.7556013699475e-06 |
"Other_Protocol_93" | 7.3092290998941e-05 | "ECHO" | 5.79379400998894e-06 |
"ICMP_UNREACH_PROTOCOL" | 6.43557119711113e-05 | "GOPHER" | 5.78169317986365e-06 |
"LPR" | 6.18399287615886e-05 | "DISCARD" | 4.49274613651789e-06 |
"IPIP" | 5.64183610153025e-05 | "Other_Protocol_46" | 3.72204843853809e-06 |
"AT_BACKUP" | 4.43516650207192e-05 | "LIQUIDAUDIO" | 3.18794283300796e-06 |
"RIP" | 4.09721112660054e-05 | "OSUNMS" | 1.5985613865515e-06 |
"Other_Protocol_46" | 1.50287835398567e-05 | "TALK" | 1.35487570402838e-06 |
"APPLETALK_IP" | 1.12750207651675e-05 | "WHO" | 1.0648730510257e-06 |
"Other_Protocol_54" | 1.02251756430713e-05 | "Other_Protocol_54" | 9.36353889695008e-07 |
"TALK" | 9.63674054193568e-06 | "SLP" | 8.40381788701313e-07 |
"ROMNET" | 8.50518739529443e-06 | "SYSTAT" | 7.73201318005726e-07 |
"BOOTP" | 2.14226081160237e-06 | "Other_Protocol_93" | 1.80260641866419e-07 |
"DIALPAD_CTRL" | 1.22905347845136e-06 | "REXEC" | 1.50217201555349e-07 |
0 | 0 |