Traffic Trace Info
DumpFile: 201410020430.dump
FileSize: 3983.86MB
Id: 201410020430
StartTime: Thu Oct 2 04:30:00 2014
EndTime: Thu Oct 2 04:45:01 2014
TotalTime: 900.61 seconds
TotalCapSize: 3020.26MB CapLen: 96 bytes
# of packets: 63150054 (14567.29MB)
AvgRate: 135.69Mbps stddev:34.98M
IP flow (unique src/dst pair) Information
# of flows: 39019318 (avg. 1.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.8% 4.0% 3.4% 3.4% 3.3% 3.0% 2.6% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 29121149
Top 10 bandwidth usage (bytes/total in %):
16.7% 15.4% 9.2% 9.2% 7.6% 6.1% 5.4% 5.1% 4.5% 4.2%
# of IPv6 addresses: 11796
Top 10 bandwidth usage (bytes/total in %):
24.4% 20.4% 16.9% 16.7% 15.3% 10.6% 6.6% 6.6% 4.3% 4.0%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410020430-bytes.png)
![[agurim packets plot]](201410020430-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410020430.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 63150054 (100.00%) 15274906276 (100.00%) 241.88
ip 61180819 ( 96.88%) 14605049749 ( 95.61%) 238.72
tcp 16677090 ( 26.41%) 9974846350 ( 65.30%) 598.12
http 9071958 ( 14.37%) 5307507870 ( 34.75%) 585.05
https 1354401 ( 2.14%) 640050537 ( 4.19%) 472.57
smtp 37510 ( 0.06%) 10588130 ( 0.07%) 282.27
ftp 34899 ( 0.06%) 2761554 ( 0.02%) 79.13
ssh 808855 ( 1.28%) 76085449 ( 0.50%) 94.07
dns 7804 ( 0.01%) 1168343 ( 0.01%) 149.71
bgp 2122 ( 0.00%) 336240 ( 0.00%) 158.45
other 5359541 ( 8.49%) 3936348227 ( 25.77%) 734.46
udp 2326635 ( 3.68%) 1266152672 ( 8.29%) 544.20
dns 423760 ( 0.67%) 148770259 ( 0.97%) 351.07
other 1902751 ( 3.01%) 1117311850 ( 7.31%) 587.21
icmp 40584305 ( 64.27%) 2513281429 ( 16.45%) 61.93
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
gre 860302 ( 1.36%) 656782010 ( 4.30%) 763.43
ipsec 16574 ( 0.03%) 21066608 ( 0.14%) 1271.06
ip6 715728 ( 1.13%) 172901282 ( 1.13%) 241.57
other 1 ( 0.00%) 238 ( 0.00%) 238.00
frag 82248 ( 0.13%) 116425279 ( 0.76%) 1415.54
ip6 1969235 ( 3.12%) 669856527 ( 4.39%) 340.16
tcp6 1872250 ( 2.96%) 650106165 ( 4.26%) 347.23
http 300522 ( 0.48%) 218348016 ( 1.43%) 726.56
https 136661 ( 0.22%) 112610704 ( 0.74%) 824.01
smtp 489 ( 0.00%) 156675 ( 0.00%) 320.40
ftp 428 ( 0.00%) 43473 ( 0.00%) 101.57
ssh 30613 ( 0.05%) 44033615 ( 0.29%) 1438.40
dns 2165 ( 0.00%) 366045 ( 0.00%) 169.07
bgp 1059 ( 0.00%) 179358 ( 0.00%) 169.37
other 1400313 ( 2.22%) 274368279 ( 1.80%) 195.93
udp6 48673 ( 0.08%) 13291969 ( 0.09%) 273.09
dns 40584 ( 0.06%) 11277216 ( 0.07%) 277.87
other 8089 ( 0.01%) 2014753 ( 0.01%) 249.07
icmp6 47557 ( 0.08%) 5798749 ( 0.04%) 121.93
ip 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 641 ( 0.00%) 644152 ( 0.00%) 1004.92
tcpdump file: 201410020430.dump.gz (1221.84 MB)