Traffic Trace Info
DumpFile: 201410020015.dump
FileSize: 5787.64MB
Id: 201410020015
StartTime: Thu Oct 2 00:15:01 2014
EndTime: Thu Oct 2 00:29:59 2014
TotalTime: 897.96 seconds
TotalCapSize: 4451.47MB CapLen: 96 bytes
# of packets: 87566316 (32627.94MB)
AvgRate: 304.89Mbps stddev:53.56M
IP flow (unique src/dst pair) Information
# of flows: 35215355 (avg. 2.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.1% 2.9% 2.9% 2.8% 1.6% 1.4% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 24853157
Top 10 bandwidth usage (bytes/total in %):
9.0% 7.8% 6.8% 6.1% 5.5% 5.3% 4.6% 3.8% 3.7% 3.3%
# of IPv6 addresses: 13050
Top 10 bandwidth usage (bytes/total in %):
35.5% 7.0% 5.4% 4.8% 4.7% 4.7% 4.7% 4.7% 4.4% 4.4%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410020015-bytes.png)
![[agurim packets plot]](201410020015-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410020015.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 87566316 (100.00%) 34212874698 (100.00%) 390.71
ip 83799309 ( 95.70%) 32482454471 ( 94.94%) 387.62
tcp 41930002 ( 47.88%) 28264589067 ( 82.61%) 674.09
http 30526818 ( 34.86%) 20274781696 ( 59.26%) 664.16
https 3511176 ( 4.01%) 3220342697 ( 9.41%) 917.17
smtp 63103 ( 0.07%) 22379768 ( 0.07%) 354.65
ftp 25726 ( 0.03%) 1959613 ( 0.01%) 76.17
ssh 907726 ( 1.04%) 315046337 ( 0.92%) 347.07
dns 9335 ( 0.01%) 2157568 ( 0.01%) 231.13
bgp 2087 ( 0.00%) 351033 ( 0.00%) 168.20
other 6884031 ( 7.86%) 4427570355 ( 12.94%) 643.17
udp 4133452 ( 4.72%) 1304799238 ( 3.81%) 315.67
dns 747369 ( 0.85%) 159258034 ( 0.47%) 213.09
other 3383260 ( 3.86%) 1144537999 ( 3.35%) 338.29
icmp 36815360 ( 42.04%) 2283581412 ( 6.67%) 62.03
ipip 186 ( 0.00%) 19350 ( 0.00%) 104.03
gre 450167 ( 0.51%) 254077592 ( 0.74%) 564.41
ipsec 18134 ( 0.02%) 23728976 ( 0.07%) 1308.54
ip6 452006 ( 0.52%) 351658576 ( 1.03%) 778.00
other 2 ( 0.00%) 260 ( 0.00%) 130.00
frag 57472 ( 0.07%) 73583949 ( 0.22%) 1280.34
ip6 3767007 ( 4.30%) 1730420227 ( 5.06%) 459.36
tcp6 3649185 ( 4.17%) 1700391686 ( 4.97%) 465.96
http 1105479 ( 1.26%) 873180899 ( 2.55%) 789.87
https 381754 ( 0.44%) 377090148 ( 1.10%) 987.78
smtp 619 ( 0.00%) 224438 ( 0.00%) 362.58
ftp 171 ( 0.00%) 15284 ( 0.00%) 89.38
ssh 91467 ( 0.10%) 92690700 ( 0.27%) 1013.38
dns 2212 ( 0.00%) 374630 ( 0.00%) 169.36
bgp 1013 ( 0.00%) 167411 ( 0.00%) 165.26
other 2066470 ( 2.36%) 356648176 ( 1.04%) 172.59
udp6 58354 ( 0.07%) 14002570 ( 0.04%) 239.96
dns 50192 ( 0.06%) 12963418 ( 0.04%) 258.28
other 8162 ( 0.01%) 1039152 ( 0.00%) 127.32
icmp6 50028 ( 0.06%) 6185853 ( 0.02%) 123.65
ip 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9327 ( 0.01%) 9824744 ( 0.03%) 1053.37
tcpdump file: 201410020015.dump.gz (1822.77 MB)