Traffic Trace Info
DumpFile: 201410020245.dump
FileSize: 4468.90MB
Id: 201410020245
StartTime: Thu Oct 2 02:45:00 2014
EndTime: Thu Oct 2 03:00:01 2014
TotalTime: 900.51 seconds
TotalCapSize: 3398.31MB CapLen: 96 bytes
# of packets: 70161817 (17875.19MB)
AvgRate: 166.52Mbps stddev:35.96M
IP flow (unique src/dst pair) Information
# of flows: 40380413 (avg. 1.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.0% 6.6% 2.5% 2.1% 2.0% 1.9% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 29538639
Top 10 bandwidth usage (bytes/total in %):
14.1% 11.0% 9.6% 9.6% 7.4% 7.0% 5.2% 4.4% 4.1% 3.4%
# of IPv6 addresses: 11981
Top 10 bandwidth usage (bytes/total in %):
32.8% 14.1% 13.0% 11.8% 11.3% 11.0% 7.0% 6.0% 6.0% 5.0%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410020245-bytes.png)
![[agurim packets plot]](201410020245-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410020245.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 70161817 (100.00%) 18743497030 (100.00%) 267.15
ip 68010349 ( 96.93%) 17815918155 ( 95.05%) 261.96
tcp 21084024 ( 30.05%) 11664083697 ( 62.23%) 553.22
http 14086611 ( 20.08%) 7501229329 ( 40.02%) 532.51
https 1098865 ( 1.57%) 677477560 ( 3.61%) 616.52
smtp 28806 ( 0.04%) 6894414 ( 0.04%) 239.34
ftp 70197 ( 0.10%) 4810505 ( 0.03%) 68.53
ssh 699026 ( 1.00%) 67336898 ( 0.36%) 96.33
dns 8330 ( 0.01%) 1305580 ( 0.01%) 156.73
bgp 2114 ( 0.00%) 344336 ( 0.00%) 162.88
other 5090075 ( 7.25%) 3404685075 ( 18.16%) 668.89
udp 2137287 ( 3.05%) 1001009754 ( 5.34%) 468.36
dns 486659 ( 0.69%) 177193737 ( 0.95%) 364.10
other 1650159 ( 2.35%) 823236211 ( 4.39%) 498.88
icmp 42051014 ( 59.93%) 2598640743 ( 13.86%) 61.80
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
gre 821639 ( 1.17%) 613774138 ( 3.27%) 747.01
ipsec 209404 ( 0.30%) 226114296 ( 1.21%) 1079.80
ip6 1706795 ( 2.43%) 1712276127 ( 9.14%) 1003.21
other 1 ( 0.00%) 130 ( 0.00%) 130.00
frag 94139 ( 0.13%) 129452411 ( 0.69%) 1375.12
ip6 2151468 ( 3.07%) 927578875 ( 4.95%) 431.14
tcp6 2048686 ( 2.92%) 906642966 ( 4.84%) 442.55
http 550894 ( 0.79%) 520332969 ( 2.78%) 944.52
https 210647 ( 0.30%) 203082981 ( 1.08%) 964.09
smtp 474 ( 0.00%) 179899 ( 0.00%) 379.53
ftp 1513 ( 0.00%) 160923 ( 0.00%) 106.36
ssh 30336 ( 0.04%) 41482956 ( 0.22%) 1367.45
dns 2118 ( 0.00%) 354639 ( 0.00%) 167.44
bgp 1106 ( 0.00%) 192436 ( 0.00%) 173.99
other 1251598 ( 1.78%) 140856163 ( 0.75%) 112.54
udp6 51983 ( 0.07%) 13112343 ( 0.07%) 252.24
dns 45483 ( 0.06%) 12222524 ( 0.07%) 268.73
other 6500 ( 0.01%) 889819 ( 0.00%) 136.90
icmp6 48914 ( 0.07%) 6018712 ( 0.03%) 123.05
ip 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1768 ( 0.00%) 1788990 ( 0.01%) 1011.87
tcpdump file: 201410020245.dump.gz (1385.36 MB)