Traffic Trace Info


DumpFile: 201410021000.dump
FileSize: 8087.04MB
Id: 201410021000
StartTime: Thu Oct 2 10:00:00 2014
EndTime: Thu Oct 2 10:15:00 2014
TotalTime: 899.86 seconds
TotalCapSize: 6496.02MB CapLen: 96 bytes
# of packets: 104268570 (80851.49MB)
AvgRate: 753.79Mbps stddev:263.71M

IP flow (unique src/dst pair) Information

# of flows: 20772924 (avg. 5.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
32.7% 26.9% 1.4% 1.2% 0.9% 0.7% 0.6% 0.6% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 15969022
Top 10 bandwidth usage (bytes/total in %):
8.0% 5.3% 4.7% 4.7% 4.1% 3.9% 3.8% 3.6% 3.3% 3.2%
# of IPv6 addresses: 13662
Top 10 bandwidth usage (bytes/total in %):
94.9% 52.0% 42.7% 0.6% 0.4% 0.4% 0.4% 0.3% 0.3% 0.2%

Aggregated Flow Summary (using agurim)

[agurim byte plot] [agurim packets plot]

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers

Protocol Breakdown

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total        104268570 (100.00%)      84778930233 (100.00%)    813.08
 ip            67393268 ( 64.63%)      31458958581 ( 37.11%)    466.80
  tcp          43556680 ( 41.77%)      28786172834 ( 33.95%)    660.89
   http        29657050 ( 28.44%)      19580071537 ( 23.10%)    660.22
   https        7459466 (  7.15%)       6186141337 (  7.30%)    829.30
   smtp           79800 (  0.08%)         32249727 (  0.04%)    404.13
   ftp            33733 (  0.03%)          2236273 (  0.00%)     66.29
   ssh           775045 (  0.74%)         72789014 (  0.09%)     93.92
   dns             7842 (  0.01%)          1047445 (  0.00%)    133.57
   bgp             1915 (  0.00%)           282901 (  0.00%)    147.73
   other        5541829 (  5.31%)       2911354600 (  3.43%)    525.34
  udp           1623418 (  1.56%)        414062570 (  0.49%)    255.06
   dns           596040 (  0.57%)        138930161 (  0.16%)    233.09
   other        1021835 (  0.98%)        268216673 (  0.32%)    262.49
  icmp         20742246 ( 19.89%)       1301563472 (  1.54%)     62.75
  ipip              167 (  0.00%)            17446 (  0.00%)    104.47
  gre            945634 (  0.91%)        701253845 (  0.83%)    741.57
  ipsec            5089 (  0.00%)          3608870 (  0.00%)    709.15
  ip6            520034 (  0.50%)        252279544 (  0.30%)    485.12
  frag            40019 (  0.04%)         55705989 (  0.07%)   1391.99
 ip6           36875302 ( 35.37%)      53319971652 ( 62.89%)   1445.95
  tcp6         36762755 ( 35.26%)      53295368227 ( 62.86%)   1449.71
   http        35175432 ( 33.74%)      51784162715 ( 61.08%)   1472.17
   https        1334682 (  1.28%)       1380141150 (  1.63%)   1034.06
   smtp             319 (  0.00%)            85353 (  0.00%)    267.56
   ftp              263 (  0.00%)            24725 (  0.00%)     94.01
   ssh            15452 (  0.01%)         22359584 (  0.03%)   1447.03
   dns             2041 (  0.00%)           344092 (  0.00%)    168.59
   bgp              927 (  0.00%)           154933 (  0.00%)    167.13
   other         233639 (  0.22%)        108095675 (  0.13%)    462.66
  udp6            66329 (  0.06%)         18103642 (  0.02%)    272.94
   dns            60623 (  0.06%)         17415101 (  0.02%)    287.27
   other           5706 (  0.01%)           688541 (  0.00%)    120.67
  icmp6           45179 (  0.04%)          5554889 (  0.01%)    122.95
  ip                 78 (  0.00%)            10554 (  0.00%)    135.31
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            931 (  0.00%)           930260 (  0.00%)    999.21


tcpdump file: 201410021000.dump.gz (1967.93 MB)