Traffic Trace Info
DumpFile: 201410021600.dump
FileSize: 8704.05MB
Id: 201410021600
StartTime: Thu Oct 2 16:00:01 2014
EndTime: Thu Oct 2 16:15:03 2014
TotalTime: 902.46 seconds
TotalCapSize: 6837.96MB CapLen: 96 bytes
# of packets: 122295682 (73237.44MB)
AvgRate: 680.75Mbps stddev:91.05M
IP flow (unique src/dst pair) Information
# of flows: 31351006 (avg. 3.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 5.2% 4.6% 3.3% 2.2% 1.8% 1.4% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 23354026
Top 10 bandwidth usage (bytes/total in %):
16.2% 9.6% 7.1% 7.0% 5.1% 3.7% 3.3% 2.6% 2.4% 2.4%
# of IPv6 addresses: 15507
Top 10 bandwidth usage (bytes/total in %):
66.4% 26.9% 18.5% 16.2% 9.1% 2.2% 2.2% 2.2% 2.2% 2.0%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410021600-bytes.png)
![[agurim packets plot]](201410021600-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410021600.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 122295682 (100.00%) 76795017316 (100.00%) 627.95
ip 107256164 ( 87.70%) 57743069186 ( 75.19%) 538.37
tcp 71065369 ( 58.11%) 53362531103 ( 69.49%) 750.89
http 43580591 ( 35.64%) 31945100768 ( 41.60%) 733.01
https 18738659 ( 15.32%) 16537477340 ( 21.53%) 882.53
smtp 109472 ( 0.09%) 23586116 ( 0.03%) 215.45
ftp 24741 ( 0.02%) 1670988 ( 0.00%) 67.54
ssh 277795 ( 0.23%) 40078182 ( 0.05%) 144.27
dns 8104 ( 0.01%) 1382496 ( 0.00%) 170.59
bgp 1909 ( 0.00%) 307246 ( 0.00%) 160.95
other 8324098 ( 6.81%) 4812927967 ( 6.27%) 578.19
udp 3018738 ( 2.47%) 1676303543 ( 2.18%) 555.30
dns 603220 ( 0.49%) 119752833 ( 0.16%) 198.52
other 2415168 ( 1.97%) 1556127685 ( 2.03%) 644.31
icmp 31908061 ( 26.09%) 1977587308 ( 2.58%) 61.98
ipip 168 ( 0.00%) 17484 ( 0.00%) 104.07
gre 688200 ( 0.56%) 464146612 ( 0.60%) 674.44
ipsec 11812 ( 0.01%) 8592656 ( 0.01%) 727.45
ip6 563815 ( 0.46%) 253890350 ( 0.33%) 450.31
other 1 ( 0.00%) 130 ( 0.00%) 130.00
frag 5005 ( 0.00%) 6823619 ( 0.01%) 1363.36
ip6 15039518 ( 12.30%) 19051948130 ( 24.81%) 1266.79
tcp6 14922699 ( 12.20%) 19024016132 ( 24.77%) 1274.84
http 11694986 ( 9.56%) 15543974791 ( 20.24%) 1329.11
https 2561595 ( 2.09%) 2786312657 ( 3.63%) 1087.73
smtp 340 ( 0.00%) 133261 ( 0.00%) 391.94
ftp 249 ( 0.00%) 24560 ( 0.00%) 98.63
ssh 19520 ( 0.02%) 28249872 ( 0.04%) 1447.23
dns 2105 ( 0.00%) 373889 ( 0.00%) 177.62
bgp 995 ( 0.00%) 170625 ( 0.00%) 171.48
other 642909 ( 0.53%) 664776477 ( 0.87%) 1034.01
udp6 72986 ( 0.06%) 21567957 ( 0.03%) 295.51
dns 67084 ( 0.05%) 20826965 ( 0.03%) 310.46
other 5902 ( 0.00%) 740992 ( 0.00%) 125.55
icmp6 42629 ( 0.03%) 5250970 ( 0.01%) 123.18
ip 75 ( 0.00%) 10250 ( 0.00%) 136.67
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 1102 ( 0.00%) 1099149 ( 0.00%) 997.41
tcpdump file: 201410021600.dump.gz (2630.88 MB)