



We present the stratification of traffic by application as a percentage
of total packets analyzed. The trace is still dominated by WWW traffic
but this is quite a bit less than in our 10/29/2001 trace. We note an
increase in p2p traffic from the previous trace. Data sampled on 1/9/2002.
Direction = 0 Applications | Direction = 0 Percentage Traffic | Direction = 1 Applications | Direction = 1 Percentage Traffic |
"WWW" | 45.4894237522031 | "WWW" | 53.3795632180704 |
"FASTTRACK" | 14.6971572809535 | "Unclassified_TCP" | 13.0346000103842 |
"Unclassified_TCP" | 12.4124143094096 | "EDONKEY_TCP" | 7.4961036504162 |
"SMTP" | 2.71782078505025 | "FASTTRACK" | 4.78831370859499 |
"EDONKEY_TCP" | 2.55902318285316 | "FTP_DATA" | 3.20796101294802 |
"DNS" | 2.42588558975484 | "SMTP" | 3.05373800303235 |
"NAPSTER_DATA" | 2.2905719081881 | "Unclassified_UDP" | 2.3602510804324 |
"GNUTELLA" | 2.23723858921839 | "NNTP" | 1.82587947937161 |
"Unclassified_UDP" | 2.22469585707408 | "MS_MEDIA" | 1.55651717081164 |
"MS_MEDIA" | 1.63599929007807 | "DNS" | 1.1625678479167 |
"FTP_CONTROL" | 1.18570009437198 | "GNUTELLA" | 0.92451481203267 |
"HALFLIFE" | 1.12243433199695 | "HTTPS" | 0.639265501354052 |
"ASHERONS" | 1.06895767606679 | "FTP_CONTROL" | 0.614484078881046 |
"FTP_DATA" | 0.845819134670281 | "SHOUTCAST" | 0.58355827822039 |
"NNTP" | 0.701620955492557 | "No_Ports_UDP" | 0.577776981075778 |
"HTTPS" | 0.671413364373117 | "NAPSTER_DATA" | 0.540350112384691 |
"No_Ports_UDP" | 0.522288463448432 | "HALFLIFE" | 0.529419638234936 |
"QUAKE" | 0.507951475740788 | "IRC" | 0.403468254817032 |
"STARCRAFT" | 0.503799491761252 | "POP" | 0.396335066647132 |
"REALAUDIO_UDP" | 0.468241152855283 | "QUAKE" | 0.329042727851919 |
"POP" | 0.300915450374754 | "ICMP_ECHO" | 0.31476752556891 |
"IRC" | 0.290166973793784 | "ESP" | 0.302600810684188 |
"ICMP_ECHO" | 0.283922988372739 | "REALAUDIO_UDP" | 0.277602087402524 |
"ESP" | 0.264136203747235 | "STARCRAFT" | 0.204956966222628 |
"ICMP_TIMXCEED_INTRANS" | 0.250250772351312 | "SSH" | 0.132181281951817 |
"ICMP_ECHOREPLY" | 0.186107033688285 | "GRE" | 0.107781201094003 |
"HOTLINE" | 0.185214993022123 | "ICMP_ECHOREPLY" | 0.101606692962296 |
"RTSP" | 0.181126747607462 | "ICMP_TIMXCEED_INTRANS" | 0.1014432608415 |
"TELNET" | 0.155898844084668 | "ICMP_UNREACH_HOST" | 0.0973455884496768 |
"GRE" | 0.148065883173076 | "NETBIOS" | 0.0904175273736629 |
"SSH" | 0.140509122709276 | "RPC" | 0.072204432705196 |
"RSYNC" | 0.131223939941634 | "EDONKEY_UDP" | 0.0694665642532622 |
"NETBIOS" | 0.129382703370385 | "RTSP" | 0.0694534775098837 |
"ICMP" | 0.117294519958684 | "ASHERONS" | 0.0585321336462059 |
"SQUID" | 0.113665311907959 | "TELNET" | 0.0583662667824549 |
"SHOUTCAST" | 0.113087774676932 | "SQUID" | 0.0465970236849969 |
"ICMP_UNREACH_HOST" | 0.0950907569834351 | "NAPSTER_CONTROL" | 0.0446297513780493 |
"NAPSTER_CONTROL" | 0.0778792497725536 | "ICMP_UNREACH_PORT" | 0.0429792999980096 |
"ICMP_UNREACH_PORT" | 0.0638214549335879 | "SQL" | 0.0357213312517093 |
"X11" | 0.0577635980916614 | "HOTLINE" | 0.0354510747837994 |
"NTP" | 0.0533470841057894 | "IDENT" | 0.0329356809693004 |
"UNREAL" | 0.0422478957969623 | "ICMP" | 0.0322219969408672 |
"IDENT" | 0.0362795123395318 | "IMESH_CTL" | 0.0249262896787777 |
"SQL" | 0.0343102001543551 | "BGP" | 0.0238349161495831 |
"NFS" | 0.0335486290388293 | "MS_NETMEET" | 0.0232822294989926 |
"MS_NETMEET" | 0.0280123511573592 | "SNMP" | 0.0219391644169135 |
"IMESH_CTL" | 0.0269039584611284 | "NFS" | 0.0203021041231215 |
"BGP" | 0.0238074013281381 | "REALAUDIO_TCP" | 0.019752765244093 |
"SNMP" | 0.0161901939624378 | "UNREAL" | 0.0177231026489456 |
"EDONKEY_UDP" | 0.0137420944354767 | "X11" | 0.0123523640349753 |
"IMAP" | 0.0124323118136078 | "AOL" | 0.0116371582921958 |
"RPC" | 0.0110061240192677 | "NTP" | 0.0109055180344758 |
"AOL" | 0.0109271241078733 | "Other_Protocol_41" | 0.0104931334466179 |
"SKIP" | 0.00818337339736037 | "TIMESERVER" | 0.0104846118462784 |
"CUSEEME" | 0.00727816607929933 | "KERBEROS" | 0.0100284018852458 |
"REALAUDIO_TCP" | 0.00684007566156665 | "IMAP" | 0.00651658951676378 |
"IP_in_IP" | 0.00638642465522598 | "APPLETALK_IP" | 0.00620129030420226 |
"KERBEROS" | 0.00613147039572582 | "IMESH_DTA" | 0.00573808045717655 |
"No_Ports_TCP" | 0.00503833904601443 | "RSYNC" | 0.00385115466771572 |
"BLACKWHITE_TCP" | 0.00420255589251212 | "DIALPAD_DATA" | 0.00314020972510596 |
"IMESH_DTA" | 0.0035355452769888 | "PORTDOOM" | 0.00303125497790806 |
"ICMP_UNREACH_NET" | 0.00313156845735826 | "BLACKWHITE_TCP" | 0.00298742960473348 |
"ISAKMP" | 0.00304718218836877 | "IP_in_IP" | 0.00246548158393907 |
"TIMESERVER" | 0.00279911049690675 | "AH" | 0.00226096317579106 |
"EVERQUEST" | 0.00244750104278387 | "IPIP" | 0.00199892396535142 |
"DIALPAD_DATA" | 0.00243882302221403 | "SQUID_ICP" | 0.0018275789299536 |
"LDAP" | 0.00212042943992743 | "AT_BACKUP" | 0.00146145445822435 |
"Other_Protocol_41" | 0.00190587286239032 | "LPR" | 0.00138780348386152 |
"SQUID_ICP" | 0.00168203978010614 | "ICMP_UNREACH_NET" | 0.00116015501764915 |
"AH" | 0.0012074418275624 | "SKIP" | 0.00110172118674972 |
"DAYTIME" | 0.00115537370414336 | "ISAKMP" | 0.000769683116378461 |
"WHOIS" | 0.00109223362344555 | "LDAP" | 0.00058342528038652 |
"ECHO" | 0.00108505181331878 | "No_Ports_TCP" | 0.000565164708230448 |
"TRACEROUTE" | 0.0010225102167982 | "BLACKWHITE_UDP" | 0.000477209619012031 |
"DISCARD" | 0.000972836030088074 | "RSHELL" | 0.000416949730896992 |
"GOPHER" | 0.000923760327555178 | "CUSEEME" | 0.000297342983274716 |
"SYSTAT" | 0.000889347487364428 | "TRACEROUTE" | 0.000279082411118643 |
"POINTCAST" | 0.000888150519009967 | "ICMP_UNREACH_PROTOCOL" | 0.000162823435058314 |
"BLACKWHITE_UDP" | 0.000862714941477674 | "DAYTIME" | 0.000150041034549063 |
"CHARGEN" | 0.000859423278502906 | "L2TP" | 0.000135736919693473 |
"PORTDOOM" | 0.00081663165983093 | "LIQUIDAUDIO" | 5.81294880301645e-05 |
"SLP" | 0.000751696126601428 | "WHOIS" | 5.6912116553093e-05 |
"RSHELL" | 0.000572450115520912 | "GOPHER" | 4.80861733443246e-05 |
"SMTPS" | 0.00051499563450679 | "DOOM" | 4.13906302204313e-05 |
"LPR" | 0.000504222919316642 | "DISCARD" | 3.10429726653235e-05 |
"ICMP_UNREACH_PROTOCOL" | 0.000454249490517901 | "ECHO" | 2.9825601188252e-05 |
"AT_BACKUP" | 0.000429412397162838 | "CHARGEN" | 2.92169154497162e-05 |
"IPIP" | 0.000392306378174551 | "TALK" | 2.00866293716799e-05 |
"RIP" | 0.000248370933550631 | "POINTCAST" | 1.67388578097332e-05 |
"Other_Protocol_93" | 0.000117602140825781 | "Other_Protocol_46" | 1.58258292019296e-05 |
"L2TP" | 6.76287120270393e-05 | "ROMNET" | 1.43041148555902e-05 |
"Other_Protocol_54" | 6.55340174067328e-05 | "Other_Protocol_54" | 1.00433146858399e-05 |
"APPLETALK_IP" | 5.74544810141219e-05 | "WHO" | 8.82594320876843e-06 |
"TALK" | 5.65567547482762e-05 | "OSUNMS" | 4.56514303901816e-06 |
"Other_Protocol_46" | 3.47120822793653e-05 | "SYSTAT" | 4.56514303901816e-06 |
"ROMNET" | 2.30416408233718e-05 | "REXEC" | 2.13040008487514e-06 |
"DIALPAD_CTRL" | 9.57574683568698e-06 | "Other_Protocol_93" | 1.82605721560726e-06 |
"RLOGIN" | 5.38635759507393e-06 | "SLP" | 1.82605721560726e-06 |
0 | 0 |