Traffic Trace Info
DumpFile: 201410021900.dump
FileSize: 7293.57MB
Id: 201410021900
StartTime: Thu Oct 2 19:00:07 2014
EndTime: Thu Oct 2 19:15:02 2014
TotalTime: 894.48 seconds
TotalCapSize: 5635.38MB CapLen: 96 bytes
# of packets: 108670577 (53178.36MB)
AvgRate: 498.75Mbps stddev:76.25M
IP flow (unique src/dst pair) Information
# of flows: 38020859 (avg. 2.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.7% 1.8% 1.8% 1.8% 1.7% 1.4% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 28198389
Top 10 bandwidth usage (bytes/total in %):
16.0% 11.7% 7.4% 7.3% 7.2% 5.2% 4.6% 3.2% 2.9% 2.3%
# of IPv6 addresses: 14202
Top 10 bandwidth usage (bytes/total in %):
8.1% 8.0% 7.3% 7.0% 5.3% 5.2% 4.9% 4.8% 4.8% 4.6%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410021900-bytes.png)
![[agurim packets plot]](201410021900-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410021900.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 108670577 (100.00%) 55761552552 (100.00%) 513.12
ip 104072550 ( 95.77%) 51175619933 ( 91.78%) 491.73
tcp 60279918 ( 55.47%) 46873021619 ( 84.06%) 777.59
http 40938991 ( 37.67%) 32865337049 ( 58.94%) 802.79
https 11049271 ( 10.17%) 9396911448 ( 16.85%) 850.46
smtp 61615 ( 0.06%) 18596998 ( 0.03%) 301.83
ftp 21827 ( 0.02%) 1414536 ( 0.00%) 64.81
ssh 643954 ( 0.59%) 87084172 ( 0.16%) 135.23
dns 10005 ( 0.01%) 1234831 ( 0.00%) 123.42
bgp 2140 ( 0.00%) 412528 ( 0.00%) 192.77
other 7551111 ( 6.95%) 4501969817 ( 8.07%) 596.20
udp 2677565 ( 2.46%) 846238183 ( 1.52%) 316.05
dns 716586 ( 0.66%) 144802825 ( 0.26%) 202.07
other 1960676 ( 1.80%) 701091906 ( 1.26%) 357.58
icmp 39805313 ( 36.63%) 2467917434 ( 4.43%) 62.00
ipip 179 ( 0.00%) 18622 ( 0.00%) 104.03
gre 673589 ( 0.62%) 474473016 ( 0.85%) 704.40
ipsec 39681 ( 0.04%) 54146258 ( 0.10%) 1364.54
ip6 596304 ( 0.55%) 459804671 ( 0.82%) 771.09
other 1 ( 0.00%) 130 ( 0.00%) 130.00
frag 25691 ( 0.02%) 34284735 ( 0.06%) 1334.50
ip6 4598027 ( 4.23%) 4585932619 ( 8.22%) 997.37
tcp6 4484423 ( 4.13%) 4560747656 ( 8.18%) 1017.02
http 1632110 ( 1.50%) 1879299122 ( 3.37%) 1151.45
https 2005490 ( 1.85%) 2341275764 ( 4.20%) 1167.43
smtp 664 ( 0.00%) 280483 ( 0.00%) 422.41
ftp 1160 ( 0.00%) 118043 ( 0.00%) 101.76
ssh 25740 ( 0.02%) 36834016 ( 0.07%) 1431.00
dns 2086 ( 0.00%) 349938 ( 0.00%) 167.76
bgp 952 ( 0.00%) 161823 ( 0.00%) 169.98
other 816221 ( 0.75%) 302428467 ( 0.54%) 370.52
udp6 66947 ( 0.06%) 18812358 ( 0.03%) 281.00
dns 58547 ( 0.05%) 17740261 ( 0.03%) 303.01
other 8400 ( 0.01%) 1072097 ( 0.00%) 127.63
icmp6 45805 ( 0.04%) 5621128 ( 0.01%) 122.72
ip 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 740 ( 0.00%) 736221 ( 0.00%) 994.89
tcpdump file: 201410021900.dump.gz (2332.04 MB)