Traffic Trace Info
DumpFile: 201410020830.dump
FileSize: 4667.19MB
Id: 201410020830
StartTime: Thu Oct 2 08:30:00 2014
EndTime: Thu Oct 2 08:45:00 2014
TotalTime: 900.11 seconds
TotalCapSize: 3559.94MB CapLen: 96 bytes
# of packets: 72563898 (23578.79MB)
AvgRate: 219.80Mbps stddev:51.47M
IP flow (unique src/dst pair) Information
# of flows: 40726045 (avg. 1.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 4.0% 3.5% 2.8% 2.7% 2.5% 2.2% 1.6% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 30242584
Top 10 bandwidth usage (bytes/total in %):
18.0% 10.9% 9.1% 8.9% 6.1% 4.3% 3.9% 3.8% 3.8% 3.3%
# of IPv6 addresses: 11779
Top 10 bandwidth usage (bytes/total in %):
48.0% 35.8% 13.1% 12.9% 4.4% 3.2% 3.2% 3.1% 2.1% 2.0%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410020830-bytes.png)
![[agurim packets plot]](201410020830-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410020830.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 72563898 (100.00%) 24724158058 (100.00%) 340.72
ip 70758266 ( 97.51%) 22907532809 ( 92.65%) 323.74
tcp 25890392 ( 35.68%) 18748399929 ( 75.83%) 724.15
http 17146930 ( 23.63%) 14132678387 ( 57.16%) 824.21
https 2457245 ( 3.39%) 1884572195 ( 7.62%) 766.95
smtp 49631 ( 0.07%) 9525851 ( 0.04%) 191.93
ftp 14740 ( 0.02%) 1101949 ( 0.00%) 74.76
ssh 971027 ( 1.34%) 92468599 ( 0.37%) 95.23
dns 8342 ( 0.01%) 1303364 ( 0.01%) 156.24
bgp 2105 ( 0.00%) 361247 ( 0.00%) 171.61
other 5240372 ( 7.22%) 2626388337 ( 10.62%) 501.18
udp 1251228 ( 1.72%) 380211066 ( 1.54%) 303.87
dns 532674 ( 0.73%) 192190292 ( 0.78%) 360.80
other 718185 ( 0.99%) 187633727 ( 0.76%) 261.26
icmp 41701235 ( 57.47%) 2578885952 ( 10.43%) 61.84
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
gre 974482 ( 1.34%) 765808585 ( 3.10%) 785.86
ipsec 23755 ( 0.03%) 32080658 ( 0.13%) 1350.48
ip6 916989 ( 1.26%) 402127329 ( 1.63%) 438.53
other 1 ( 0.00%) 130 ( 0.00%) 130.00
frag 94641 ( 0.13%) 132562472 ( 0.54%) 1400.69
ip6 1805632 ( 2.49%) 1816625249 ( 7.35%) 1006.09
tcp6 1700210 ( 2.34%) 1795894787 ( 7.26%) 1056.28
http 1244268 ( 1.71%) 1347493214 ( 5.45%) 1082.96
https 383999 ( 0.53%) 361399350 ( 1.46%) 941.15
smtp 342 ( 0.00%) 135737 ( 0.00%) 396.89
ftp 418 ( 0.00%) 42830 ( 0.00%) 102.46
ssh 18565 ( 0.03%) 26651290 ( 0.11%) 1435.57
dns 2138 ( 0.00%) 366073 ( 0.00%) 171.22
bgp 1017 ( 0.00%) 172551 ( 0.00%) 169.67
other 49463 ( 0.07%) 59633742 ( 0.24%) 1205.62
udp6 55931 ( 0.08%) 14155905 ( 0.06%) 253.10
dns 49052 ( 0.07%) 13323623 ( 0.05%) 271.62
other 6879 ( 0.01%) 832282 ( 0.00%) 120.99
icmp6 48806 ( 0.07%) 5980248 ( 0.02%) 122.53
ip 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 573 ( 0.00%) 579053 ( 0.00%) 1010.56
tcpdump file: 201410020830.dump.gz (1429.23 MB)