Traffic Trace Info
DumpFile: 201410020745.dump
FileSize: 4874.75MB
Id: 201410020745
StartTime: Thu Oct 2 07:45:00 2014
EndTime: Thu Oct 2 08:00:00 2014
TotalTime: 899.83 seconds
TotalCapSize: 3720.16MB CapLen: 96 bytes
# of packets: 75666951 (24535.99MB)
AvgRate: 228.79Mbps stddev:64.55M
IP flow (unique src/dst pair) Information
# of flows: 42457885 (avg. 1.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 7.9% 6.0% 4.8% 3.4% 3.3% 3.1% 2.7% 2.1% 1.9%
IP address Information
# of IPv4 addresses: 31546338
Top 10 bandwidth usage (bytes/total in %):
28.6% 14.8% 11.4% 8.9% 8.8% 6.6% 5.3% 5.1% 3.9% 3.8%
# of IPv6 addresses: 11282
Top 10 bandwidth usage (bytes/total in %):
64.2% 38.9% 29.1% 4.5% 3.9% 3.8% 2.9% 2.9% 2.9% 2.6%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410020745-bytes.png)
![[agurim packets plot]](201410020745-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410020745.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 75666951 (100.00%) 25727845249 (100.00%) 340.01
ip 73552707 ( 97.21%) 23519417187 ( 91.42%) 319.76
tcp 25770967 ( 34.06%) 19226898308 ( 74.73%) 746.07
http 17031458 ( 22.51%) 14967648630 ( 58.18%) 878.82
https 1683477 ( 2.22%) 1169191073 ( 4.54%) 694.51
smtp 36255 ( 0.05%) 9427237 ( 0.04%) 260.03
ftp 17885 ( 0.02%) 1229213 ( 0.00%) 68.73
ssh 1360654 ( 1.80%) 165943166 ( 0.64%) 121.96
dns 7830 ( 0.01%) 1192010 ( 0.00%) 152.24
bgp 2014 ( 0.00%) 291032 ( 0.00%) 144.50
other 5631394 ( 7.44%) 2911975947 ( 11.32%) 517.10
udp 1373350 ( 1.81%) 415343605 ( 1.61%) 302.43
dns 516015 ( 0.68%) 147608241 ( 0.57%) 286.05
other 857124 ( 1.13%) 267560978 ( 1.04%) 312.16
icmp 44476509 ( 58.78%) 2743499466 ( 10.66%) 61.68
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
gre 1091724 ( 1.44%) 909181999 ( 3.53%) 832.79
ipsec 4408 ( 0.01%) 3127004 ( 0.01%) 709.39
ip6 835566 ( 1.10%) 221347743 ( 0.86%) 264.91
frag 58167 ( 0.08%) 82947460 ( 0.32%) 1426.02
ip6 2114244 ( 2.79%) 2208428062 ( 8.58%) 1044.55
tcp6 2016934 ( 2.67%) 2189658129 ( 8.51%) 1085.64
http 430169 ( 0.57%) 337475421 ( 1.31%) 784.52
https 326123 ( 0.43%) 329643329 ( 1.28%) 1010.79
smtp 383 ( 0.00%) 163634 ( 0.00%) 427.24
ftp 266 ( 0.00%) 24176 ( 0.00%) 90.89
ssh 21599 ( 0.03%) 31206314 ( 0.12%) 1444.80
dns 2058 ( 0.00%) 369214 ( 0.00%) 179.40
bgp 1669 ( 0.00%) 307699 ( 0.00%) 184.36
other 1234667 ( 1.63%) 1490468342 ( 5.79%) 1207.18
udp6 46819 ( 0.06%) 11991021 ( 0.05%) 256.11
dns 40930 ( 0.05%) 11248253 ( 0.04%) 274.82
other 5889 ( 0.01%) 742768 ( 0.00%) 126.13
icmp6 49677 ( 0.07%) 6079478 ( 0.02%) 122.38
ip 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 700 ( 0.00%) 683942 ( 0.00%) 977.06
tcpdump file: 201410020745.dump.gz (1452.48 MB)