Traffic Trace Info
DumpFile: 201410022300.dump
FileSize: 7833.91MB
Id: 201410022300
StartTime: Thu Oct 2 23:00:01 2014
EndTime: Thu Oct 2 23:15:00 2014
TotalTime: 899.05 seconds
TotalCapSize: 6023.27MB CapLen: 96 bytes
# of packets: 118661810 (52867.44MB)
AvgRate: 493.32Mbps stddev:60.17M
IP flow (unique src/dst pair) Information
# of flows: 43183907 (avg. 2.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.8% 3.6% 2.6% 2.5% 2.5% 2.4% 2.4% 2.4% 2.2%
IP address Information
# of IPv4 addresses: 32264683
Top 10 bandwidth usage (bytes/total in %):
17.8% 15.6% 8.2% 5.8% 5.6% 5.1% 5.0% 4.3% 4.0% 3.7%
# of IPv6 addresses: 14063
Top 10 bandwidth usage (bytes/total in %):
24.1% 18.6% 18.6% 15.0% 11.2% 6.7% 6.2% 4.4% 3.7% 3.6%
Aggregated Flow Summary (using agurim)
![[agurim byte plot]](201410022300-bytes.png)
![[agurim packets plot]](201410022300-pkts.png)
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201410022300.pktlen.png)
detailed numbers
Protocol Breakdown
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 118661810 (100.00%) 55435529286 (100.00%) 467.17
ip 115596985 ( 97.42%) 53522668650 ( 96.55%) 463.01
tcp 65192342 ( 54.94%) 48649490747 ( 87.76%) 746.25
http 46417461 ( 39.12%) 35243706388 ( 63.58%) 759.28
https 10433400 ( 8.79%) 8076291008 ( 14.57%) 774.08
smtp 63922 ( 0.05%) 24105864 ( 0.04%) 377.11
ftp 35149 ( 0.03%) 2530034 ( 0.00%) 71.98
ssh 421523 ( 0.36%) 60532593 ( 0.11%) 143.60
dns 10595 ( 0.01%) 1261716 ( 0.00%) 119.09
bgp 2024 ( 0.00%) 321108 ( 0.00%) 158.65
other 7808268 ( 6.58%) 5240742036 ( 9.45%) 671.18
udp 3351862 ( 2.82%) 1192781941 ( 2.15%) 355.86
dns 744371 ( 0.63%) 174004126 ( 0.31%) 233.76
other 2606709 ( 2.20%) 1017853711 ( 1.84%) 390.47
icmp 45996441 ( 38.76%) 2841149657 ( 5.13%) 61.77
ipip 182 ( 0.00%) 18940 ( 0.00%) 104.07
gre 620657 ( 0.52%) 445191858 ( 0.80%) 717.29
ipsec 61904 ( 0.05%) 88699372 ( 0.16%) 1432.85
ip6 373596 ( 0.31%) 305336005 ( 0.55%) 817.29
other 1 ( 0.00%) 130 ( 0.00%) 130.00
frag 42095 ( 0.04%) 58399021 ( 0.11%) 1387.31
ip6 3064825 ( 2.58%) 1912860636 ( 3.45%) 624.13
tcp6 2955866 ( 2.49%) 1890781324 ( 3.41%) 639.67
http 1669357 ( 1.41%) 1275499789 ( 2.30%) 764.07
https 463396 ( 0.39%) 445266013 ( 0.80%) 960.88
smtp 1196 ( 0.00%) 445058 ( 0.00%) 372.12
ftp 384 ( 0.00%) 37044 ( 0.00%) 96.47
ssh 31782 ( 0.03%) 46057609 ( 0.08%) 1449.17
dns 2104 ( 0.00%) 351118 ( 0.00%) 166.88
bgp 931 ( 0.00%) 160435 ( 0.00%) 172.33
other 786716 ( 0.66%) 122964258 ( 0.22%) 156.30
udp6 61331 ( 0.05%) 15594724 ( 0.03%) 254.27
dns 50921 ( 0.04%) 14098475 ( 0.03%) 276.87
other 10410 ( 0.01%) 1496249 ( 0.00%) 143.73
icmp6 46855 ( 0.04%) 5801266 ( 0.01%) 123.81
ip 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 665 ( 0.00%) 668592 ( 0.00%) 1005.40
tcpdump file: 201410022300.dump.gz (2515.47 MB)