Traffic Trace Info


DumpFile: 201410020145.dump
FileSize: 4286.84MB
Id: 201410020145
StartTime: Thu Oct 2 01:45:00 2014
EndTime: Thu Oct 2 02:00:00 2014
TotalTime: 900.01 seconds
TotalCapSize: 3319.40MB CapLen: 96 bytes
# of packets: 63401392 (28621.16MB)
AvgRate: 266.79Mbps stddev:52.31M

IP flow (unique src/dst pair) Information

# of flows: 21252403 (avg. 2.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 5.7% 5.7% 3.6% 3.0% 2.8% 2.4% 2.3% 2.0% 1.8%

IP address Information

# of IPv4 addresses: 15905560
Top 10 bandwidth usage (bytes/total in %):
17.5% 15.0% 7.7% 6.4% 6.1% 6.0% 6.0% 4.4% 3.8% 3.4%
# of IPv6 addresses: 12019
Top 10 bandwidth usage (bytes/total in %):
22.3% 8.2% 8.1% 7.6% 7.5% 7.5% 7.5% 7.2% 7.0% 6.4%

Aggregated Flow Summary (using agurim)

[agurim byte plot] [agurim packets plot]

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers

Protocol Breakdown

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         63401392 (100.00%)      30011460395 (100.00%)    473.36
 ip            60558680 ( 95.52%)      28496805713 ( 94.95%)    470.57
  tcp          34085030 ( 53.76%)      24275959797 ( 80.89%)    712.22
   http        23734807 ( 37.44%)      17690750199 ( 58.95%)    745.35
   https        1549626 (  2.44%)       1186898449 (  3.95%)    765.93
   smtp           56977 (  0.09%)         24389486 (  0.08%)    428.06
   ftp            17936 (  0.03%)          1184107 (  0.00%)     66.02
   ssh           853680 (  1.35%)         82448483 (  0.27%)     96.58
   dns             9398 (  0.01%)          1369717 (  0.00%)    145.75
   bgp             2139 (  0.00%)           352323 (  0.00%)    164.71
   other        7860467 ( 12.40%)       5288567033 ( 17.62%)    672.81
  udp           4105904 (  6.48%)       2136456936 (  7.12%)    520.34
   dns           466455 (  0.74%)        148031625 (  0.49%)    317.35
   other        3638726 (  5.74%)       1987568252 (  6.62%)    546.23
  icmp         21296239 ( 33.59%)       1348061577 (  4.49%)     63.30
  ipip              186 (  0.00%)            19350 (  0.00%)    104.03
  gre            808873 (  1.28%)        580851818 (  1.94%)    718.10
  ipsec            4735 (  0.01%)          3343874 (  0.01%)    706.20
  ip6            257711 (  0.41%)        152111993 (  0.51%)    590.24
  other               2 (  0.00%)              368 (  0.00%)    184.00
  frag           129052 (  0.20%)        136516316 (  0.45%)   1057.84
 ip6            2842712 (  4.48%)       1514654682 (  5.05%)    532.82
  tcp6          2735524 (  4.31%)       1491480928 (  4.97%)    545.23
   http          738018 (  1.16%)        693243655 (  2.31%)    939.33
   https         408490 (  0.64%)        437172146 (  1.46%)   1070.22
   smtp             959 (  0.00%)           444076 (  0.00%)    463.06
   ftp              364 (  0.00%)            35512 (  0.00%)     97.56
   ssh            27015 (  0.04%)         39106466 (  0.13%)   1447.58
   dns             2158 (  0.00%)           367949 (  0.00%)    170.50
   bgp              993 (  0.00%)           169076 (  0.00%)    170.27
   other        1557527 (  2.46%)        320942048 (  1.07%)    206.06
  udp6            52923 (  0.08%)         12612701 (  0.04%)    238.32
   dns            46186 (  0.07%)         11565419 (  0.04%)    250.41
   other           6737 (  0.01%)          1047282 (  0.00%)    155.45
  icmp6           49726 (  0.08%)          6097321 (  0.02%)    122.62
  ip                 84 (  0.00%)            11412 (  0.00%)    135.86
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           4424 (  0.01%)          4448104 (  0.01%)   1005.45


tcpdump file: 201410020145.dump.gz (1332.44 MB)