Traffic Trace Info
DumpFile: 201410020700.dump
FileSize: 4204.35MB
Id: 201410020700
StartTime: Thu Oct 2 07:00:00 2014
EndTime: Thu Oct 2 07:15:00 2014
TotalTime: 899.90 seconds
TotalCapSize: 3200.20MB CapLen: 96 bytes
# of packets: 65807574 (15682.97MB)
AvgRate: 146.21Mbps stddev:54.19M
IP flow (unique src/dst pair) Information
# of flows: 37547328 (avg. 1.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.3% 5.9% 4.7% 4.2% 2.7% 1.8% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 28096569
Top 10 bandwidth usage (bytes/total in %):
15.1% 13.0% 12.9% 8.8% 6.1% 6.1% 5.7% 5.1% 5.0% 4.8%
# of IPv6 addresses: 11238
Top 10 bandwidth usage (bytes/total in %):
15.4% 14.4% 12.8% 11.2% 10.3% 10.3% 9.9% 9.0% 9.0% 8.9%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410020700-bytes.png)
![[agurim packets plot]](201410020700-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410020700.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 65807574 (100.00%) 16444789628 (100.00%) 249.89
ip 64851032 ( 98.55%) 15863498636 ( 96.47%) 244.61
tcp 21673847 ( 32.94%) 11729716433 ( 71.33%) 541.19
http 9124566 ( 13.87%) 6519751241 ( 39.65%) 714.53
https 1513021 ( 2.30%) 1109716167 ( 6.75%) 733.44
smtp 59016 ( 0.09%) 28049820 ( 0.17%) 475.29
ftp 17378 ( 0.03%) 1106724 ( 0.01%) 63.69
ssh 1373705 ( 2.09%) 158331086 ( 0.96%) 115.26
dns 8132 ( 0.01%) 1280746 ( 0.01%) 157.49
bgp 2138 ( 0.00%) 370766 ( 0.00%) 173.42
other 9575891 ( 14.55%) 3911109883 ( 23.78%) 408.43
udp 1298305 ( 1.97%) 364558780 ( 2.22%) 280.80
dns 506802 ( 0.77%) 157532071 ( 0.96%) 310.84
other 787621 ( 1.20%) 206580576 ( 1.26%) 262.28
icmp 39850361 ( 60.56%) 2467643476 ( 15.01%) 61.92
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
gre 1119448 ( 1.70%) 901464859 ( 5.48%) 805.28
ipsec 119074 ( 0.18%) 174051024 ( 1.06%) 1461.70
ip6 789811 ( 1.20%) 226044644 ( 1.37%) 286.20
other 2 ( 0.00%) 260 ( 0.00%) 130.00
frag 110714 ( 0.17%) 135289094 ( 0.82%) 1221.97
ip6 956540 ( 1.45%) 581290872 ( 3.53%) 607.70
tcp6 859796 ( 1.31%) 563238257 ( 3.43%) 655.08
http 483815 ( 0.74%) 211025587 ( 1.28%) 436.17
https 217813 ( 0.33%) 223385821 ( 1.36%) 1025.59
smtp 212 ( 0.00%) 91857 ( 0.00%) 433.29
ftp 364 ( 0.00%) 35254 ( 0.00%) 96.85
ssh 28417 ( 0.04%) 36747507 ( 0.22%) 1293.15
dns 2204 ( 0.00%) 374581 ( 0.00%) 169.96
bgp 1073 ( 0.00%) 189103 ( 0.00%) 176.24
other 125898 ( 0.19%) 91388547 ( 0.56%) 725.89
udp6 46818 ( 0.07%) 11507765 ( 0.07%) 245.80
dns 41050 ( 0.06%) 10795388 ( 0.07%) 262.98
other 5768 ( 0.01%) 712377 ( 0.00%) 123.51
icmp6 49304 ( 0.07%) 6030375 ( 0.04%) 122.31
ip 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 505 ( 0.00%) 498611 ( 0.00%) 987.35
tcpdump file: 201410020700.dump.gz (1265.60 MB)