Traffic Trace Info
DumpFile: 201410021344.dump
FileSize: 7136.06MB
Id: 201410021344
StartTime: Thu Oct 2 13:44:59 2014
EndTime: Thu Oct 2 14:00:00 2014
TotalTime: 901.30 seconds
TotalCapSize: 5582.39MB CapLen: 96 bytes
# of packets: 101821174 (58521.97MB)
AvgRate: 544.74Mbps stddev:68.33M
IP flow (unique src/dst pair) Information
# of flows: 25281609 (avg. 4.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.1% 1.9% 1.8% 1.5% 1.3% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 18797927
Top 10 bandwidth usage (bytes/total in %):
8.5% 7.0% 6.8% 6.7% 4.4% 4.3% 3.8% 3.6% 3.0% 2.9%
# of IPv6 addresses: 15479
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.2% 9.0% 7.5% 7.5% 7.4% 3.9% 3.2% 3.0% 2.9%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410021344-bytes.png)
![[agurim packets plot]](201410021344-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410021344.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 101821174 (100.00%) 61364735758 (100.00%) 602.67
ip 94450009 ( 92.76%) 55656891740 ( 90.70%) 589.27
tcp 63914026 ( 62.77%) 50717369013 ( 82.65%) 793.52
http 43053984 ( 42.28%) 36485124636 ( 59.46%) 847.43
https 12729817 ( 12.50%) 9929512349 ( 16.18%) 780.02
smtp 72612 ( 0.07%) 29212412 ( 0.05%) 402.31
ftp 27718 ( 0.03%) 1853752 ( 0.00%) 66.88
ssh 395485 ( 0.39%) 56338432 ( 0.09%) 142.45
dns 49113 ( 0.05%) 3849079 ( 0.01%) 78.37
bgp 2033 ( 0.00%) 317519 ( 0.00%) 156.18
other 7583264 ( 7.45%) 4211160834 ( 6.86%) 555.32
udp 3829415 ( 3.76%) 2545143986 ( 4.15%) 664.63
dns 743847 ( 0.73%) 155321484 ( 0.25%) 208.81
other 3085220 ( 3.03%) 2389430598 ( 3.89%) 774.48
icmp 25142993 ( 24.69%) 1576790147 ( 2.57%) 62.71
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
gre 776489 ( 0.76%) 543901796 ( 0.89%) 700.46
ipsec 6668 ( 0.01%) 5136408 ( 0.01%) 770.31
ip6 780233 ( 0.77%) 268531100 ( 0.44%) 344.17
other 1 ( 0.00%) 130 ( 0.00%) 130.00
frag 37613 ( 0.04%) 53980212 ( 0.09%) 1435.15
ip6 7371165 ( 7.24%) 5707844018 ( 9.30%) 774.35
tcp6 7239853 ( 7.11%) 5676787186 ( 9.25%) 784.10
http 4252750 ( 4.18%) 3188664879 ( 5.20%) 749.79
https 2401362 ( 2.36%) 2362096834 ( 3.85%) 983.65
smtp 43 ( 0.00%) 11873 ( 0.00%) 276.12
ftp 514 ( 0.00%) 49038 ( 0.00%) 95.40
ssh 16848 ( 0.02%) 24252933 ( 0.04%) 1439.51
dns 2182 ( 0.00%) 373668 ( 0.00%) 171.25
bgp 976 ( 0.00%) 163531 ( 0.00%) 167.55
other 565178 ( 0.56%) 101174430 ( 0.16%) 179.01
udp6 81199 ( 0.08%) 23845472 ( 0.04%) 293.67
dns 74656 ( 0.07%) 22988924 ( 0.04%) 307.93
other 6543 ( 0.01%) 856548 ( 0.00%) 130.91
icmp6 48798 ( 0.05%) 5992444 ( 0.01%) 122.80
ip 81 ( 0.00%) 10958 ( 0.00%) 135.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1204 ( 0.00%) 1203878 ( 0.00%) 999.90
tcpdump file: 201410021344.dump.gz (2278.53 MB)