Traffic Trace Info
DumpFile: 201410021500.dump
FileSize: 6888.11MB
Id: 201410021500
StartTime: Thu Oct 2 15:00:02 2014
EndTime: Thu Oct 2 15:15:01 2014
TotalTime: 898.91 seconds
TotalCapSize: 5411.32MB CapLen: 96 bytes
# of packets: 96782121 (55084.83MB)
AvgRate: 514.05Mbps stddev:75.73M
IP flow (unique src/dst pair) Information
# of flows: 20261969 (avg. 4.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 1.8% 1.5% 1.5% 1.4% 1.2% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 15594118
Top 10 bandwidth usage (bytes/total in %):
16.6% 7.4% 5.8% 4.0% 3.4% 3.3% 2.8% 2.5% 2.4% 2.0%
# of IPv6 addresses: 16186
Top 10 bandwidth usage (bytes/total in %):
36.9% 26.9% 15.1% 9.3% 5.7% 4.4% 4.4% 4.4% 4.3% 3.0%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410021500-bytes.png)
![[agurim packets plot]](201410021500-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410021500.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 96782121 (100.00%) 57760630459 (100.00%) 596.81
ip 88723836 ( 91.67%) 49445861390 ( 85.60%) 557.30
tcp 63929413 ( 66.05%) 45965675157 ( 79.58%) 719.01
http 41417322 ( 42.79%) 29411536700 ( 50.92%) 710.13
https 13542489 ( 13.99%) 11355650690 ( 19.66%) 838.52
smtp 108172 ( 0.11%) 54665447 ( 0.09%) 505.36
ftp 29056 ( 0.03%) 1968475 ( 0.00%) 67.75
ssh 353091 ( 0.36%) 47342974 ( 0.08%) 134.08
dns 30822 ( 0.03%) 2631281 ( 0.00%) 85.37
bgp 2571 ( 0.00%) 872449 ( 0.00%) 339.34
other 8445887 ( 8.73%) 5091006961 ( 8.81%) 602.78
udp 2817447 ( 2.91%) 1277954454 ( 2.21%) 453.59
dns 728889 ( 0.75%) 171213240 ( 0.30%) 234.90
other 2088117 ( 2.16%) 1106229215 ( 1.92%) 529.77
icmp 20463033 ( 21.14%) 1296910808 ( 2.25%) 63.38
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
gre 820708 ( 0.85%) 578839021 ( 1.00%) 705.29
ipsec 34239 ( 0.04%) 46782142 ( 0.08%) 1366.34
ip6 658811 ( 0.68%) 279680626 ( 0.48%) 424.52
other 2 ( 0.00%) 120 ( 0.00%) 60.00
frag 66344 ( 0.07%) 85158443 ( 0.15%) 1283.59
ip6 8058285 ( 8.33%) 8314769069 ( 14.40%) 1031.83
tcp6 7927106 ( 8.19%) 8283400131 ( 14.34%) 1044.95
http 5181070 ( 5.35%) 5435883317 ( 9.41%) 1049.18
https 2371300 ( 2.45%) 2352872399 ( 4.07%) 992.23
smtp 360 ( 0.00%) 152807 ( 0.00%) 424.46
ftp 524 ( 0.00%) 49367 ( 0.00%) 94.21
ssh 24114 ( 0.02%) 34877145 ( 0.06%) 1446.34
dns 2228 ( 0.00%) 377794 ( 0.00%) 169.57
bgp 964 ( 0.00%) 169739 ( 0.00%) 176.08
other 346546 ( 0.36%) 459017563 ( 0.79%) 1324.55
udp6 82378 ( 0.09%) 24365065 ( 0.04%) 295.77
dns 75530 ( 0.08%) 23484048 ( 0.04%) 310.92
other 6848 ( 0.01%) 881017 ( 0.00%) 128.65
icmp6 47590 ( 0.05%) 5874018 ( 0.01%) 123.43
ip 83 ( 0.00%) 11244 ( 0.00%) 135.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1098 ( 0.00%) 1114531 ( 0.00%) 1015.06
tcpdump file: 201410021500.dump.gz (2174.86 MB)