Traffic Trace Info
DumpFile: 201410020115.dump
FileSize: 5436.58MB
Id: 201410020115
StartTime: Thu Oct 2 01:15:00 2014
EndTime: Thu Oct 2 01:30:00 2014
TotalTime: 900.08 seconds
TotalCapSize: 4139.20MB CapLen: 96 bytes
# of packets: 85025085 (26472.97MB)
AvgRate: 246.71Mbps stddev:40.48M
IP flow (unique src/dst pair) Information
# of flows: 43631014 (avg. 1.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 5.4% 3.8% 3.4% 2.1% 2.1% 2.0% 1.5% 1.2% 0.9%
IP address Information
# of IPv4 addresses: 32229391
Top 10 bandwidth usage (bytes/total in %):
12.7% 10.7% 8.5% 7.1% 6.7% 5.7% 4.3% 4.0% 3.6% 3.6%
# of IPv6 addresses: 11739
Top 10 bandwidth usage (bytes/total in %):
14.6% 10.8% 8.8% 8.0% 7.7% 7.7% 7.7% 7.4% 6.7% 6.7%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410020115-bytes.png)
![[agurim packets plot]](201410020115-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410020115.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 85025085 (100.00%) 27758916453 (100.00%) 326.48
ip 82143737 ( 96.61%) 26187127050 ( 94.34%) 318.80
tcp 30114422 ( 35.42%) 20575229286 ( 74.12%) 683.24
http 18776045 ( 22.08%) 12023236402 ( 43.31%) 640.35
https 2755046 ( 3.24%) 2506351395 ( 9.03%) 909.73
smtp 60988 ( 0.07%) 18529013 ( 0.07%) 303.81
ftp 20218 ( 0.02%) 1378693 ( 0.00%) 68.19
ssh 852180 ( 1.00%) 80356775 ( 0.29%) 94.30
dns 14787 ( 0.02%) 2014629 ( 0.01%) 136.24
bgp 2052 ( 0.00%) 291203 ( 0.00%) 141.91
other 7633106 ( 8.98%) 5943071176 ( 21.41%) 778.59
udp 3823456 ( 4.50%) 1873018444 ( 6.75%) 489.88
dns 467583 ( 0.55%) 135835063 ( 0.49%) 290.50
other 3355437 ( 3.95%) 1736712739 ( 6.26%) 517.58
icmp 46992099 ( 55.27%) 2900099623 ( 10.45%) 61.71
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
gre 867598 ( 1.02%) 608650073 ( 2.19%) 701.53
ipsec 7650 ( 0.01%) 7379584 ( 0.03%) 964.65
ip6 338326 ( 0.40%) 222730640 ( 0.80%) 658.33
other 1 ( 0.00%) 130 ( 0.00%) 130.00
frag 68656 ( 0.08%) 96809795 ( 0.35%) 1410.07
ip6 2881348 ( 3.39%) 1571789403 ( 5.66%) 545.50
tcp6 2775902 ( 3.26%) 1549207532 ( 5.58%) 558.09
http 541076 ( 0.64%) 546943706 ( 1.97%) 1010.84
https 421276 ( 0.50%) 478376494 ( 1.72%) 1135.54
smtp 483 ( 0.00%) 157148 ( 0.00%) 325.36
ftp 338 ( 0.00%) 34387 ( 0.00%) 101.74
ssh 28200 ( 0.03%) 38912812 ( 0.14%) 1379.89
dns 2370 ( 0.00%) 499152 ( 0.00%) 210.61
bgp 1089 ( 0.00%) 185496 ( 0.00%) 170.34
other 1781070 ( 2.09%) 484098337 ( 1.74%) 271.80
udp6 52809 ( 0.06%) 12705433 ( 0.05%) 240.59
dns 46300 ( 0.05%) 11681455 ( 0.04%) 252.30
other 6509 ( 0.01%) 1023978 ( 0.00%) 157.32
icmp6 48615 ( 0.06%) 5940095 ( 0.02%) 122.19
ip 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3907 ( 0.00%) 3920715 ( 0.01%) 1003.51
tcpdump file: 201410020115.dump.gz (1676.37 MB)