Traffic Trace Info
DumpFile: 201410021445.dump
FileSize: 7260.36MB
Id: 201410021445
StartTime: Thu Oct 2 14:45:01 2014
EndTime: Thu Oct 2 15:00:02 2014
TotalTime: 901.57 seconds
TotalCapSize: 5681.55MB CapLen: 96 bytes
# of packets: 103468463 (56214.91MB)
AvgRate: 522.93Mbps stddev:85.24M
IP flow (unique src/dst pair) Information
# of flows: 22426857 (avg. 4.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.2% 1.7% 1.6% 1.6% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 17048056
Top 10 bandwidth usage (bytes/total in %):
14.8% 7.1% 5.9% 5.6% 3.6% 3.0% 2.8% 2.6% 2.6% 2.5%
# of IPv6 addresses: 16084
Top 10 bandwidth usage (bytes/total in %):
14.1% 12.3% 4.8% 4.5% 4.1% 4.1% 3.1% 2.8% 2.5% 2.5%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410021445-bytes.png)
![[agurim packets plot]](201410021445-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410021445.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 103468463 (100.00%) 58945602414 (100.00%) 569.70
ip 97982176 ( 94.70%) 54086945418 ( 91.76%) 552.01
tcp 69729201 ( 67.39%) 48891556091 ( 82.94%) 701.16
http 45501561 ( 43.98%) 32373221200 ( 54.92%) 711.47
https 12994129 ( 12.56%) 10758427340 ( 18.25%) 827.95
smtp 50184 ( 0.05%) 18047228 ( 0.03%) 359.62
ftp 32225 ( 0.03%) 2240591 ( 0.00%) 69.53
ssh 628758 ( 0.61%) 89594428 ( 0.15%) 142.49
dns 49442 ( 0.05%) 3965666 ( 0.01%) 80.21
bgp 2046 ( 0.00%) 328392 ( 0.00%) 160.50
other 10470854 ( 10.12%) 5645731082 ( 9.58%) 539.19
udp 3865364 ( 3.74%) 2346991838 ( 3.98%) 607.19
dns 684162 ( 0.66%) 135116103 ( 0.23%) 197.49
other 3180850 ( 3.07%) 2211570512 ( 3.75%) 695.28
icmp 22457645 ( 21.70%) 1419551438 ( 2.41%) 63.21
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
gre 995790 ( 0.96%) 770312938 ( 1.31%) 773.57
ipsec 128577 ( 0.12%) 188125682 ( 0.32%) 1463.14
ip6 805414 ( 0.78%) 470388141 ( 0.80%) 584.03
other 1 ( 0.00%) 130 ( 0.00%) 130.00
frag 24205 ( 0.02%) 34611479 ( 0.06%) 1429.93
ip6 5486285 ( 5.30%) 4858656876 ( 8.24%) 885.60
tcp6 5351711 ( 5.17%) 4827686888 ( 8.19%) 902.08
http 2708589 ( 2.62%) 2389337043 ( 4.05%) 882.13
https 2368625 ( 2.29%) 2286333722 ( 3.88%) 965.26
smtp 132 ( 0.00%) 49082 ( 0.00%) 371.83
ftp 126 ( 0.00%) 11175 ( 0.00%) 88.69
ssh 19450 ( 0.02%) 28077804 ( 0.05%) 1443.59
dns 2150 ( 0.00%) 368300 ( 0.00%) 171.30
bgp 979 ( 0.00%) 164444 ( 0.00%) 167.97
other 251660 ( 0.24%) 123345318 ( 0.21%) 490.13
udp6 85879 ( 0.08%) 24068662 ( 0.04%) 280.26
dns 75058 ( 0.07%) 22805078 ( 0.04%) 303.83
other 10821 ( 0.01%) 1263584 ( 0.00%) 116.77
icmp6 47556 ( 0.05%) 5861299 ( 0.01%) 123.25
ip 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1027 ( 0.00%) 1024771 ( 0.00%) 997.83
tcpdump file: 201410021445.dump.gz (2334.16 MB)