



We present the stratification of traffic by application as a percentage
of total flows analyzed. The trace is still dominated by WWW traffic
but this is quite a bit less than in our 10/29/2001 trace. We note an
increase in p2p traffic from the previous trace.
Data sampled on 1/9/2002.
Direction = 0 Applications | Direction = 0 Percentage Traffic | Direction = 1 Applications | Direction = 1 Percentage Traffic |
"WWW" | 63.6305582419819 | "WWW" | 67.8769622486477 |
"Unclassified_TCP" | 8.82366166832337 | "DNS" | 7.48956643957017 |
"DNS" | 7.9582259816153 | "Unclassified_TCP" | 5.55435028616129 |
"ASHERONS" | 3.53706163372943 | "FTP_CONTROL" | 3.14410300465053 |
"FTP_CONTROL" | 3.19145984717503 | "SMTP" | 2.83449287503761 |
"SMTP" | 2.51121673054965 | "EDONKEY_TCP" | 1.25831311893757 |
"FASTTRACK" | 2.00517636915796 | "EDONKEY_UDP" | 1.14875858274644 |
"Unclassified_UDP" | 1.38487814198733 | "FASTTRACK" | 1.03869951518096 |
"HTTPS" | 0.791790226649029 | "Unclassified_UDP" | 1.01422084003049 |
"HALFLIFE" | 0.455132955474858 | "RPC" | 0.943936651752917 |
"ICMP_UNREACH_HOST" | 0.450029492924756 | "HTTPS" | 0.936742627921111 |
"EDONKEY_TCP" | 0.395961169647071 | "ASHERONS" | 0.7278963172593 |
"ICMP_UNREACH_PORT" | 0.395569724772662 | "ICMP_ECHOREPLY" | 0.576311349753792 |
"GNUTELLA" | 0.390686449964415 | "SSH" | 0.518747287772884 |
"POP" | 0.372949104092776 | "ICMP_ECHO" | 0.510763820731811 |
"ICMP_TIMXCEED_INTRANS" | 0.34073319092895 | "POP" | 0.491674727791968 |
"IDENT" | 0.318342544112779 | "HALFLIFE" | 0.450629616573369 |
"SSH" | 0.276937462522211 | "ICMP_UNREACH_HOST" | 0.419841331411999 |
"IRC" | 0.266485884375502 | "ICMP_TIMXCEED_INTRANS" | 0.417259317908009 |
"ICMP_ECHO" | 0.265786176662497 | "IDENT" | 0.347628052585465 |
"NETBIOS" | 0.234866924645149 | "GNUTELLA" | 0.288348583931792 |
"NTP" | 0.196485754709388 | "ICMP" | 0.283950257480167 |
"NAPSTER_DATA" | 0.195629469046619 | "ICMP_UNREACH_PORT" | 0.273378841271877 |
"ICMP_ECHOREPLY" | 0.190589616288608 | "IRC" | 0.224213742757971 |
"QUAKE" | 0.149918493837557 | "NETBIOS" | 0.193098996119085 |
"RPC" | 0.14551963206139 | "NTP" | 0.142794250265487 |
"ICMP" | 0.138561699418778 | "QUAKE" | 0.139642413091651 |
"EDONKEY_UDP" | 0.121054327410854 | "FTP_DATA" | 0.0794488523009331 |
"NAPSTER_CONTROL" | 0.120966252314112 | "MS_MEDIA" | 0.0719758522974311 |
"SQUID" | 0.0972055484375111 | "SQUID" | 0.0661232883550538 |
"FTP_DATA" | 0.0943186424887478 | "NAPSTER_DATA" | 0.0615172136904648 |
"MS_MEDIA" | 0.0753873897501628 | "TIMESERVER" | 0.052192286759963 |
"STARCRAFT" | 0.0702496757735501 | "REALAUDIO_UDP" | 0.0510882533996363 |
"UNREAL" | 0.0326269302819553 | "NAPSTER_CONTROL" | 0.0410985321876474 |
"NNTP" | 0.0315944944257027 | "STARCRAFT" | 0.0346583375857414 |
"RTSP" | 0.0313449483182672 | "SHOUTCAST" | 0.0337917307545172 |
"SQL" | 0.0248078189156439 | "SNMP" | 0.0334355909608634 |
"X11" | 0.0247735674891331 | "NNTP" | 0.0274405711010246 |
"MS_NETMEET" | 0.0222781064147784 | "UNREAL" | 0.0211131541004422 |
"TELNET" | 0.0222487480491978 | "TELNET" | 0.020667979358375 |
"TIMESERVER" | 0.0182755825739507 | "RTSP" | 0.0197895012006956 |
"SHOUTCAST" | 0.0167636267465475 | "X11" | 0.0176942120813658 |
"REALAUDIO_UDP" | 0.0162889998363271 | "ICMP_UNREACH_NET" | 0.0126726409908474 |
"ICMP_UNREACH_NET" | 0.0162547484098164 | "SQL" | 0.0116754495686168 |
"SNMP" | 0.0137397150917412 | "BLACKWHITE_UDP" | 0.00884413820906913 |
"BLACKWHITE_UDP" | 0.0135733510201176 | "LPR" | 0.00870761795483518 |
"TRACEROUTE" | 0.0126681347480477 | "MS_NETMEET" | 0.00865419698578711 |
"IMAP" | 0.0111072483113435 | "NFS" | 0.00850580540509803 |
"ESP" | 0.00995248593183819 | "IMAP" | 0.00789443209265903 |
"NFS" | 0.00939467698580596 | "IMESH_CTL" | 0.00701595393497968 |
"LDAP" | 0.00707536610493512 | "AT_BACKUP" | 0.00684975536460791 |
"ISAKMP" | 0.00663009756029535 | "ESP" | 0.00496221445824282 |
"HOTLINE" | 0.00628269023425774 | "TRACEROUTE" | 0.00412528594315641 |
"KERBEROS" | 0.00570041598357497 | "No_Ports_UDP" | 0.00354359094685522 |
"No_Ports_TCP" | 0.0049762429659191 | "KERBEROS" | 0.00324680778547706 |
"ECHO" | 0.0044380062636073 | "ISAKMP" | 0.00292034630796108 |
"REALAUDIO_TCP" | 0.0042373907654729 | "BGP" | 0.00265324146272074 |
"LPR" | 0.00398784465803743 | "LDAP" | 0.00251078554525922 |
"No_Ports_UDP" | 0.00311687981247833 | "HOTLINE" | 0.00223774503679132 |
"AT_BACKUP" | 0.00297498104550522 | "GRE" | 0.00210716044578493 |
"BLACKWHITE_TCP" | 0.00285754758318265 | "BLACKWHITE_TCP" | 0.00198844718123366 |
"GRE" | 0.00258353617109664 | "REALAUDIO_TCP" | 0.00179850595795164 |
"DAYTIME" | 0.00244653046505364 | "RSHELL" | 0.00106248371773381 |
"BGP" | 0.00211380232180634 | "IMESH_DTA" | 0.000949706116410108 |
"WHOIS" | 0.00206487171250527 | "DAYTIME" | 0.000771636219583213 |
"ICMP_UNREACH_PROTOCOL" | 0.0019523313111128 | "No_Ports_TCP" | 0.000641051628576823 |
"DISCARD" | 0.00173214356925797 | "ICMP_UNREACH_PROTOCOL" | 0.000599501985983881 |
"IMESH_CTL" | 0.00140920154787089 | "RSYNC" | 0.000516402700797996 |
"SYSTAT" | 0.00137005706043004 | "DOOM" | 0.000385818109791607 |
"GOPHER" | 0.00135048481670961 | "WHOIS" | 0.000368011120108917 |
"POINTCAST" | 0.00128687502461821 | "SQUID_ICP" | 0.000314590151060848 |
"IMESH_DTA" | 0.001277088902758 | "AOL" | 0.000314590151060848 |
"CHARGEN" | 0.00103732891718274 | "L2TP" | 0.00026116918201278 |
"RSHELL" | 0.000944360759510704 | "CUSEEME" | 0.000255233518785217 |
"RSYNC" | 0.000851392601838665 | "SKIP" | 0.000255233518785217 |
"AOL" | 0.000694814652075233 | "Other_Protocol_41" | 0.000225555202647401 |
"SLP" | 0.000523557519521478 | "DISCARD" | 0.000207748212964711 |
"Other_Protocol_54" | 0.000464840788360191 | "WHO" | 0.000172134233599332 |
"CUSEEME" | 0.000401230996268796 | "ECHO" | 0.000154327243916643 |
"SMTPS" | 0.000381658752548367 | "CHARGEN" | 0.000136520254233953 |
"TALK" | 0.000274011412086007 | "Other_Protocol_54" | 0.000136520254233953 |
"SKIP" | 0.000200615498134398 | "IP_in_IP" | 0.000118713264551264 |
"APPLETALK_IP" | 0.000176150193483862 | "GOPHER" | 0.0001127776013237 |
"L2TP" | 0.000171257132553755 | "TALK" | 0.000100906274868574 |
"PORTDOOM" | 0.000151684888833325 | "APPLETALK_IP" | 8.90349484134477e-05 |
"SQUID_ICP" | 0.000132112645112896 | "POINTCAST" | 8.90349484134477e-05 |
"Other_Protocol_41" | 7.33959139516091e-05 | "PORTDOOM" | 7.71636219583213e-05 |
"ROMNET" | 6.85028530215018e-05 | "SYSTAT" | 5.93566322756318e-05 |
"AH" | 6.36097920913945e-05 | "IPIP" | 4.74853058205054e-05 |
"RLOGIN" | 5.87167311612873e-05 | "Other_Protocol_46" | 4.15496425929422e-05 |
"LIQUIDAUDIO" | 5.382367023118e-05 | "DIALPAD_DATA" | 3.56139793653791e-05 |
"SCOUR_EX" | 4.40375483709655e-05 | "Other_Protocol_93" | 3.56139793653791e-05 |
"Other_Protocol_93" | 2.93583655806436e-05 | "AH" | 2.96783161378159e-05 |
"RIP" | 2.93583655806436e-05 | "OSUNMS" | 2.96783161378159e-05 |
"DIALPAD_DATA" | 2.93583655806436e-05 | "REXEC" | 2.96783161378159e-05 |
"REXEC" | 2.93583655806436e-05 | "SLP" | 1.78069896826895e-05 |
"IP_in_IP" | 2.93583655806436e-05 | "ROMNET" | 1.78069896826895e-05 |
"IPIP" | 2.44653046505364e-05 | "SMTPS" | 1.78069896826895e-05 |
0 | 0 |