Traffic Trace Info
DumpFile: 201410021145.dump
FileSize: 6359.70MB
Id: 201410021145
StartTime: Thu Oct 2 11:45:00 2014
EndTime: Thu Oct 2 12:00:00 2014
TotalTime: 900.07 seconds
TotalCapSize: 4976.66MB CapLen: 96 bytes
# of packets: 90638394 (50487.71MB)
AvgRate: 470.66Mbps stddev:67.02M
IP flow (unique src/dst pair) Information
# of flows: 20702547 (avg. 4.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.5% 2.7% 1.9% 1.6% 1.4% 1.2% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 15603817
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.5% 6.6% 5.3% 4.5% 3.2% 3.0% 2.9% 2.7% 2.6%
# of IPv6 addresses: 14597
Top 10 bandwidth usage (bytes/total in %):
22.6% 8.6% 5.9% 4.9% 4.7% 4.7% 4.1% 3.3% 3.3% 3.1%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410021145-bytes.png)
![[agurim packets plot]](201410021145-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410021145.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 90638394 (100.00%) 52940205144 (100.00%) 584.08
ip 85239261 ( 94.04%) 48584735721 ( 91.77%) 569.98
tcp 59890142 ( 66.08%) 44464032231 ( 83.99%) 742.43
http 40706756 ( 44.91%) 30481787791 ( 57.58%) 748.81
https 10168771 ( 11.22%) 8357165936 ( 15.79%) 821.85
smtp 47401 ( 0.05%) 16691789 ( 0.03%) 352.14
ftp 68477 ( 0.08%) 4257226 ( 0.01%) 62.17
ssh 820273 ( 0.90%) 82015170 ( 0.15%) 99.99
dns 8523 ( 0.01%) 1264005 ( 0.00%) 148.31
bgp 4308 ( 0.00%) 1317940 ( 0.00%) 305.93
other 8065633 ( 8.90%) 5519532374 ( 10.43%) 684.33
udp 2981868 ( 3.29%) 1721773168 ( 3.25%) 577.41
dns 713566 ( 0.79%) 169283369 ( 0.32%) 237.24
other 2268186 ( 2.50%) 1552383494 ( 2.93%) 684.42
icmp 20824589 ( 22.98%) 1316684189 ( 2.49%) 63.23
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
gre 911849 ( 1.01%) 698917033 ( 1.32%) 766.48
ipsec 7881 ( 0.01%) 4888514 ( 0.01%) 620.29
ip6 622747 ( 0.69%) 378421316 ( 0.71%) 607.66
frag 51477 ( 0.06%) 73489907 ( 0.14%) 1427.63
ip6 5399133 ( 5.96%) 4355469423 ( 8.23%) 806.70
tcp6 5273534 ( 5.82%) 4326629680 ( 8.17%) 820.44
http 1731921 ( 1.91%) 1133652972 ( 2.14%) 654.56
https 2910005 ( 3.21%) 2911893406 ( 5.50%) 1000.65
smtp 4234 ( 0.00%) 4518836 ( 0.01%) 1067.27
ftp 1444 ( 0.00%) 147726 ( 0.00%) 102.30
ssh 20103 ( 0.02%) 29099330 ( 0.05%) 1447.51
dns 2300 ( 0.00%) 383734 ( 0.00%) 166.84
bgp 909 ( 0.00%) 157080 ( 0.00%) 172.81
other 602618 ( 0.66%) 246776596 ( 0.47%) 409.51
udp6 75182 ( 0.08%) 21526666 ( 0.04%) 286.33
dns 68869 ( 0.08%) 20741998 ( 0.04%) 301.18
other 6313 ( 0.01%) 784668 ( 0.00%) 124.29
icmp6 49084 ( 0.05%) 6044046 ( 0.01%) 123.14
ip 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1219 ( 0.00%) 1253539 ( 0.00%) 1028.33
tcpdump file: 201410021145.dump.gz (1999.29 MB)