Traffic Trace Info
DumpFile: 201410021730.dump
FileSize: 8269.92MB
Id: 201410021730
StartTime: Thu Oct 2 17:30:06 2014
EndTime: Thu Oct 2 17:45:07 2014
TotalTime: 901.18 seconds
TotalCapSize: 6389.28MB CapLen: 96 bytes
# of packets: 123248916 (60616.14MB)
AvgRate: 564.15Mbps stddev:68.00M
IP flow (unique src/dst pair) Information
# of flows: 41375179 (avg. 2.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.1% 2.2% 1.9% 1.3% 1.3% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 31555925
Top 10 bandwidth usage (bytes/total in %):
15.5% 14.5% 6.3% 5.5% 4.6% 3.6% 3.1% 3.1% 2.7% 2.5%
# of IPv6 addresses: 15582
Top 10 bandwidth usage (bytes/total in %):
9.9% 6.9% 6.9% 5.6% 5.2% 5.1% 4.8% 4.8% 4.4% 3.1%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410021730-bytes.png)
![[agurim packets plot]](201410021730-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410021730.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 123248916 (100.00%) 63560631065 (100.00%) 515.71
ip 116107642 ( 94.21%) 55873112667 ( 87.91%) 481.22
tcp 67551032 ( 54.81%) 49872542118 ( 78.46%) 738.29
http 42785094 ( 34.71%) 29029053487 ( 45.67%) 678.49
https 13972101 ( 11.34%) 11768362889 ( 18.52%) 842.28
smtp 127475 ( 0.10%) 54481775 ( 0.09%) 427.39
ftp 27966 ( 0.02%) 1872341 ( 0.00%) 66.95
ssh 292626 ( 0.24%) 59069225 ( 0.09%) 201.86
dns 7860 ( 0.01%) 1030230 ( 0.00%) 131.07
bgp 2487 ( 0.00%) 909498 ( 0.00%) 365.70
other 10335423 ( 8.39%) 8957762673 ( 14.09%) 866.70
udp 3580302 ( 2.90%) 2015807767 ( 3.17%) 563.03
dns 731611 ( 0.59%) 133134137 ( 0.21%) 181.97
other 2848010 ( 2.31%) 1882197869 ( 2.96%) 660.88
icmp 43194896 ( 35.05%) 2643648148 ( 4.16%) 61.20
ipip 168 ( 0.00%) 17472 ( 0.00%) 104.00
gre 1086635 ( 0.88%) 794074496 ( 1.25%) 730.76
ipsec 15935 ( 0.01%) 20153890 ( 0.03%) 1264.76
ip6 678668 ( 0.55%) 526868416 ( 0.83%) 776.33
other 6 ( 0.00%) 360 ( 0.00%) 60.00
frag 8257 ( 0.01%) 9820560 ( 0.02%) 1189.36
ip6 7141274 ( 5.79%) 7687518398 ( 12.09%) 1076.49
tcp6 7023565 ( 5.70%) 7660554057 ( 12.05%) 1090.69
http 2275688 ( 1.85%) 2492440773 ( 3.92%) 1095.25
https 3549257 ( 2.88%) 4240955120 ( 6.67%) 1194.89
smtp 636 ( 0.00%) 280091 ( 0.00%) 440.39
ftp 137 ( 0.00%) 12313 ( 0.00%) 89.88
ssh 24171 ( 0.02%) 34911487 ( 0.05%) 1444.35
dns 2001 ( 0.00%) 332487 ( 0.00%) 166.16
bgp 1017 ( 0.00%) 182526 ( 0.00%) 179.47
other 1170658 ( 0.95%) 891439260 ( 1.40%) 761.49
udp6 72865 ( 0.06%) 20722864 ( 0.03%) 284.40
dns 65163 ( 0.05%) 19757537 ( 0.03%) 303.20
other 7702 ( 0.01%) 965327 ( 0.00%) 125.33
icmp6 43929 ( 0.04%) 5428197 ( 0.01%) 123.57
ip 78 ( 0.00%) 10554 ( 0.00%) 135.31
pim6 28 ( 0.00%) 3808 ( 0.00%) 136.00
other6 809 ( 0.00%) 798918 ( 0.00%) 987.54
tcpdump file: 201410021730.dump.gz (2646.66 MB)