Traffic Trace Info
DumpFile: 201410020130.dump
FileSize: 4505.52MB
Id: 201410020130
StartTime: Thu Oct 2 01:30:00 2014
EndTime: Thu Oct 2 01:45:00 2014
TotalTime: 899.94 seconds
TotalCapSize: 3471.23MB CapLen: 96 bytes
# of packets: 67782503 (27733.62MB)
AvgRate: 258.52Mbps stddev:39.72M
IP flow (unique src/dst pair) Information
# of flows: 26386122 (avg. 2.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 6.3% 5.8% 4.5% 3.0% 2.5% 2.2% 1.7% 1.5% 1.2%
IP address Information
# of IPv4 addresses: 19628846
Top 10 bandwidth usage (bytes/total in %):
14.2% 13.1% 8.9% 8.1% 6.7% 6.1% 5.7% 4.8% 3.4% 3.4%
# of IPv6 addresses: 11618
Top 10 bandwidth usage (bytes/total in %):
19.0% 11.6% 11.6% 8.1% 6.8% 6.7% 6.7% 6.1% 6.1% 5.8%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410020130-bytes.png)
![[agurim packets plot]](201410020130-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410020130.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 67782503 (100.00%) 29080813055 (100.00%) 429.03
ip 65589603 ( 96.76%) 27699524916 ( 95.25%) 422.32
tcp 33357055 ( 49.21%) 22674644019 ( 77.97%) 679.76
http 21695466 ( 32.01%) 14164616654 ( 48.71%) 652.88
https 2503402 ( 3.69%) 2284251020 ( 7.85%) 912.46
smtp 60955 ( 0.09%) 13211448 ( 0.05%) 216.74
ftp 18477 ( 0.03%) 1227375 ( 0.00%) 66.43
ssh 1029125 ( 1.52%) 97696809 ( 0.34%) 94.93
dns 31287 ( 0.05%) 2666434 ( 0.01%) 85.22
bgp 2073 ( 0.00%) 323321 ( 0.00%) 155.97
other 8016267 ( 11.83%) 6110650778 ( 21.01%) 762.28
udp 3842074 ( 5.67%) 2012058489 ( 6.92%) 523.69
dns 480957 ( 0.71%) 170543205 ( 0.59%) 354.59
other 3360510 ( 4.96%) 1840790714 ( 6.33%) 547.77
icmp 26637543 ( 39.30%) 1671543398 ( 5.75%) 62.75
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
gre 1317153 ( 1.94%) 942500606 ( 3.24%) 715.56
ipsec 17916 ( 0.03%) 22759576 ( 0.08%) 1270.35
ip6 417678 ( 0.62%) 375999668 ( 1.29%) 900.21
frag 96593 ( 0.14%) 128253307 ( 0.44%) 1327.77
ip6 2192900 ( 3.24%) 1381288139 ( 4.75%) 629.89
tcp6 2083249 ( 3.07%) 1354552282 ( 4.66%) 650.21
http 750355 ( 1.11%) 537409353 ( 1.85%) 716.21
https 429645 ( 0.63%) 451571080 ( 1.55%) 1051.03
smtp 352 ( 0.00%) 128691 ( 0.00%) 365.60
ftp 147 ( 0.00%) 13176 ( 0.00%) 89.63
ssh 32336 ( 0.05%) 46850461 ( 0.16%) 1448.86
dns 2252 ( 0.00%) 379464 ( 0.00%) 168.50
bgp 1165 ( 0.00%) 204451 ( 0.00%) 175.49
other 866997 ( 1.28%) 317995606 ( 1.09%) 366.78
udp6 53506 ( 0.08%) 12749611 ( 0.04%) 238.28
dns 47421 ( 0.07%) 11753793 ( 0.04%) 247.86
other 6085 ( 0.01%) 995818 ( 0.00%) 163.65
icmp6 47983 ( 0.07%) 5863921 ( 0.02%) 122.21
ip 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8049 ( 0.01%) 8106901 ( 0.03%) 1007.19
tcpdump file: 201410020130.dump.gz (1406.82 MB)