Traffic Trace Info


DumpFile: 201410020500.dump
FileSize: 3994.08MB
Id: 201410020500
StartTime: Thu Oct 2 05:00:00 2014
EndTime: Thu Oct 2 05:15:00 2014
TotalTime: 899.77 seconds
TotalCapSize: 3027.17MB CapLen: 96 bytes
# of packets: 63367235 (13778.63MB)
AvgRate: 128.45Mbps stddev:37.73M

IP flow (unique src/dst pair) Information

# of flows: 38052813 (avg. 1.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.3% 4.6% 3.6% 2.5% 1.8% 1.8% 1.6% 1.6% 1.4% 1.3%

IP address Information

# of IPv4 addresses: 28364381
Top 10 bandwidth usage (bytes/total in %):
16.8% 12.3% 8.9% 8.6% 6.3% 5.4% 5.3% 4.3% 4.1% 3.8%
# of IPv6 addresses: 11541
Top 10 bandwidth usage (bytes/total in %):
22.9% 21.8% 21.4% 14.8% 9.4% 9.4% 9.1% 5.3% 5.3% 3.9%

Aggregated Flow Summary (using agurim)

[agurim byte plot] [agurim packets plot]

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers

Protocol Breakdown

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         63367235 (100.00%)      14447943269 (100.00%)    228.00
 ip            62475217 ( 98.59%)      13949118026 ( 96.55%)    223.27
  tcp          19091638 ( 30.13%)       8937518030 ( 61.86%)    468.14
   http        12137814 ( 19.15%)       5464998795 ( 37.83%)    450.25
   https        1521665 (  2.40%)        773118459 (  5.35%)    508.07
   smtp           44685 (  0.07%)          8023668 (  0.06%)    179.56
   ftp            34699 (  0.05%)          2167663 (  0.02%)     62.47
   ssh          1080652 (  1.71%)        121978209 (  0.84%)    112.87
   dns             8778 (  0.01%)          1346202 (  0.01%)    153.36
   bgp             2123 (  0.00%)           333773 (  0.00%)    157.22
   other        4261222 (  6.72%)       2565551261 ( 17.76%)    602.07
  udp           2167486 (  3.42%)       1305653428 (  9.04%)    602.38
   dns           435618 (  0.69%)        146011920 (  1.01%)    335.18
   other        1731751 (  2.73%)       1159537384 (  8.03%)    669.58
  icmp         39151522 ( 61.79%)       2426625418 ( 16.80%)     61.98
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  gre           1231605 (  1.94%)        884037271 (  6.12%)    717.79
  ipsec           78852 (  0.12%)        114205176 (  0.79%)   1448.35
  ip6            753930 (  1.19%)        281059543 (  1.95%)    372.79
  frag            87674 (  0.14%)        117889540 (  0.82%)   1344.64
 ip6             892018 (  1.41%)        498825243 (  3.45%)    559.21
  tcp6           793643 (  1.25%)        478998173 (  3.32%)    603.54
   http          270697 (  0.43%)        212622613 (  1.47%)    785.46
   https         100161 (  0.16%)         73097720 (  0.51%)    729.80
   smtp             329 (  0.00%)           148282 (  0.00%)    450.71
   ftp              302 (  0.00%)            26865 (  0.00%)     88.96
   ssh            32306 (  0.05%)         46813897 (  0.32%)   1449.08
   dns             2531 (  0.00%)           494461 (  0.00%)    195.36
   bgp             1341 (  0.00%)           346076 (  0.00%)    258.07
   other         385976 (  0.61%)        145448259 (  1.01%)    376.83
  udp6            49837 (  0.08%)         13261278 (  0.09%)    266.09
   dns            41467 (  0.07%)         11510927 (  0.08%)    277.59
   other           8370 (  0.01%)          1750351 (  0.01%)    209.12
  icmp6           47704 (  0.08%)          5833221 (  0.04%)    122.28
  ip                 85 (  0.00%)            11530 (  0.00%)    135.65
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            719 (  0.00%)           716961 (  0.00%)    997.16


tcpdump file: 201410020500.dump.gz (1231.58 MB)