Traffic Trace Info


DumpFile: 201410020944.dump
FileSize: 5688.93MB
Id: 201410020944
StartTime: Thu Oct 2 09:44:59 2014
EndTime: Thu Oct 2 10:00:00 2014
TotalTime: 900.80 seconds
TotalCapSize: 4384.28MB CapLen: 96 bytes
# of packets: 85501070 (35290.20MB)
AvgRate: 328.63Mbps stddev:68.96M

IP flow (unique src/dst pair) Information

# of flows: 34008120 (avg. 2.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.3% 2.2% 1.4% 1.2% 1.2% 1.1% 1.1% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 25351582
Top 10 bandwidth usage (bytes/total in %):
8.4% 6.1% 6.0% 3.9% 3.5% 3.5% 3.2% 2.8% 2.6% 2.6%
# of IPv6 addresses: 14454
Top 10 bandwidth usage (bytes/total in %):
25.7% 18.5% 13.7% 10.3% 8.7% 3.9% 3.1% 3.1% 2.6% 2.5%

Aggregated Flow Summary (using agurim)

[agurim byte plot] [agurim packets plot]

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers

Protocol Breakdown

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         85501070 (100.00%)      37004452518 (100.00%)    432.80
 ip            81609432 ( 95.45%)      33549067135 ( 90.66%)    411.09
  tcp          44222522 ( 51.72%)      30164696339 ( 81.52%)    682.11
   http        28441711 ( 33.26%)      19545533031 ( 52.82%)    687.21
   https        6964467 (  8.15%)       5638424961 ( 15.24%)    809.60
   smtp           41759 (  0.05%)          9581813 (  0.03%)    229.46
   ftp            43268 (  0.05%)          2897744 (  0.01%)     66.97
   ssh          1167510 (  1.37%)        139491475 (  0.38%)    119.48
   dns             8243 (  0.01%)          1220102 (  0.00%)    148.02
   bgp             2062 (  0.00%)           310940 (  0.00%)    150.80
   other        7553502 (  8.83%)       4827236273 ( 13.05%)    639.07
  udp           1498102 (  1.75%)        418456854 (  1.13%)    279.32
   dns           580004 (  0.68%)        127311352 (  0.34%)    219.50
   other         917934 (  1.07%)        291003480 (  0.79%)    317.02
  icmp         34142330 ( 39.93%)       2122599527 (  5.74%)     62.17
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  gre            832129 (  0.97%)        615355481 (  1.66%)    739.50
  ipsec           12079 (  0.01%)          8176186 (  0.02%)    676.89
  ip6            902084 (  1.06%)        219763348 (  0.59%)    243.62
  other               1 (  0.00%)              130 (  0.00%)    130.00
  frag            31646 (  0.04%)         45308188 (  0.12%)   1431.72
 ip6            3891638 (  4.55%)       3455385383 (  9.34%)    887.90
  tcp6          3769550 (  4.41%)       3428515308 (  9.27%)    909.53
   http         2424023 (  2.84%)       2136156539 (  5.77%)    881.24
   https        1170657 (  1.37%)       1206756694 (  3.26%)   1030.84
   smtp             218 (  0.00%)            76746 (  0.00%)    352.05
   ftp              376 (  0.00%)            37169 (  0.00%)     98.85
   ssh            20291 (  0.02%)         28831186 (  0.08%)   1420.89
   dns             2104 (  0.00%)           366086 (  0.00%)    174.00
   bgp              929 (  0.00%)           154011 (  0.00%)    165.78
   other         150952 (  0.18%)         56136877 (  0.15%)    371.89
  udp6            71621 (  0.08%)         19695046 (  0.05%)    274.99
   dns            62846 (  0.07%)         18646655 (  0.05%)    296.70
   other           8775 (  0.01%)          1048391 (  0.00%)    119.47
  icmp6           49316 (  0.06%)          6088874 (  0.02%)    123.47
  ip                 84 (  0.00%)            11462 (  0.00%)    136.45
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           1036 (  0.00%)          1070477 (  0.00%)   1033.28


tcpdump file: 201410020944.dump.gz (1769.80 MB)