DumpFile: 2016-11-4_win12.pcap FileSize: 616.90MB Id: 197001010100 StartTime: Thu Jan 1 01:00:10 1970 EndTime: Sat Jan 17 07:05:34 1970 TotalTime: 1404324.03 seconds TotalCapSize: 564.41MB CapLen: 1514 bytes # of packets: 3439694 (564.41MB) AvgRate: 12.24Kbps stddev:38.58K PeakRate: 12.92Mbps ### IP flow (unique src/dst pair) Information ### # of flows: 113304 (avg. 30.36 pkts/flow) Top 10 big flow size (bytes/total in %): 3.6% 1.7% 0.8% 0.5% 0.4% 0.3% 0.3% 0.3% 0.3% 0.3% ### IP address Information ### # of IPv4 addresses: 80497 Top 10 bandwidth usage (bytes/total in %): 97.2% 4.1% 2.0% 1.9% 0.9% 0.8% 0.7% 0.6% 0.6% 0.5% ### Packet Size Distribution (including MAC headers) ### <<<< [ 32- 63]: 896314 [ 64- 127]: 822527 [ 128- 255]: 1031731 [ 256- 511]: 611077 [ 512- 1023]: 22127 [ 1024- 2047]: 55918 >>>> ### Protocol Breakdown ### <<<< protocol packets bytes bytes/pkt ------------------------------------------------------------------------ [0] total 3439694 (100.00%) 591830776 (100.00%) 172.06 [1] ip 2492783 ( 72.47%) 518236043 ( 87.56%) 207.89 [2] tcp 449354 ( 13.06%) 65329543 ( 11.04%) 145.39 [3] http(s) 14726 ( 0.43%) 21790321 ( 3.68%) 1479.72 [3] http(c) 6123 ( 0.18%) 390879 ( 0.07%) 63.84 [3] https 3793 ( 0.11%) 1750919 ( 0.30%) 461.62 [3] socks 27 ( 0.00%) 1656 ( 0.00%) 61.33 [3] hotline 9 ( 0.00%) 558 ( 0.00%) 62.00 [3] http-a 806 ( 0.02%) 171890 ( 0.03%) 213.26 [3] kestrel 9 ( 0.00%) 558 ( 0.00%) 62.00 [3] other 423861 ( 12.32%) 41222762 ( 6.97%) 97.26 [2] udp 1980762 ( 57.59%) 445361182 ( 75.25%) 224.84 [3] dns 896 ( 0.03%) 96579 ( 0.02%) 107.79 [3] netb-ns 27855 ( 0.81%) 2562660 ( 0.43%) 92.00 [3] kazaa 4 ( 0.00%) 628 ( 0.00%) 157.00 [3] mcast 65258 ( 1.90%) 11101223 ( 1.88%) 170.11 [3] halflif 37 ( 0.00%) 5480 ( 0.00%) 148.11 [3] everque 449 ( 0.01%) 107206 ( 0.02%) 238.77 [3] unreal 4 ( 0.00%) 628 ( 0.00%) 157.00 [3] quake 28 ( 0.00%) 4404 ( 0.00%) 157.29 [3] other 1886228 ( 54.84%) 431482194 ( 72.91%) 228.75 [2] icmp 46007 ( 1.34%) 6622186 ( 1.12%) 143.94 [2] igmp 16660 ( 0.48%) 923132 ( 0.16%) 55.41 [2] frag 1576 ( 0.05%) 1858069 ( 0.31%) 1178.98 >>>>