DumpFile: 2018-02-23_win11.pcap FileSize: 53.45MB Id: 197001010100 StartTime: Thu Jan 1 01:00:11 1970 EndTime: Sun Jan 11 03:38:54 1970 TotalTime: 873523.65 seconds TotalCapSize: 45.21MB CapLen: 1500 bytes # of packets: 539953 (45.21MB) AvgRate: 2.26Kbps stddev:1.59K PeakRate: 512.40Kbps ### IP flow (unique src/dst pair) Information ### # of flows: 104 (avg. 5191.86 pkts/flow) Top 10 big flow size (bytes/total in %): 2.8% 1.9% 1.7% 1.6% 1.2% 0.9% 0.9% 0.7% 0.6% 0.5% ### IP address Information ### # of IPv4 addresses: 45 Top 10 bandwidth usage (bytes/total in %): 42.2% 21.8% 19.5% 19.3% 19.0% 10.8% 9.6% 9.3% 7.0% 5.5% ### Packet Size Distribution (including MAC headers) ### <<<< [ 32- 63]: 151578 [ 64- 127]: 349573 [ 128- 255]: 31622 [ 256- 511]: 2878 [ 512- 1023]: 4235 [ 1024- 2047]: 67 >>>> ### Protocol Breakdown ### <<<< protocol packets bytes bytes/pkt ------------------------------------------------------------------------ [0] total 539953 (100.00%) 47406583 (100.00%) 87.80 [1] ip 58722 ( 10.88%) 9272869 ( 19.56%) 157.91 [2] tcp 2064 ( 0.38%) 137621 ( 0.29%) 66.68 [3] ftpdata 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ftp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ssh 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] telnet 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] smtp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] name 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] dns 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] http(s) 24 ( 0.00%) 6140 ( 0.01%) 255.83 [3] http(c) 26 ( 0.00%) 2393 ( 0.01%) 92.04 [3] kerb5 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] pop3 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] sunrpc 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ident 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] nntp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] epmap 4 ( 0.00%) 280 ( 0.00%) 70.00 [3] netb-se 4 ( 0.00%) 280 ( 0.00%) 70.00 [3] imap 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] bgp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ldap 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] https 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ms-ds 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] rlogin 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] rtsp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ldaps 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] socks 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] mssql-s 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] squid 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ms-gc 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ms-gcs 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] mysql 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] realaud 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] icecast 4 ( 0.00%) 280 ( 0.00%) 70.00 [3] gnu6346 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc6666 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc6667 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc6668 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc6669 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] napster 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc7000 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] http-a 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] http-tw 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] other 1930 ( 0.36%) 123640 ( 0.26%) 64.06 [2] udp 41530 ( 7.69%) 8326842 ( 17.56%) 200.50 [3] sunrpc 1 ( 0.00%) 98 ( 0.00%) 98.00 [3] netb-ns 6401 ( 1.19%) 596542 ( 1.26%) 93.20 [3] netb-se 208 ( 0.04%) 50524 ( 0.11%) 242.90 [3] mcast 22623 ( 4.19%) 5510421 ( 11.62%) 243.58 [3] other 12297 ( 2.28%) 2169257 ( 4.58%) 176.41 [2] icmp 2 ( 0.00%) 84 ( 0.00%) 42.00 [2] igmp 15124 ( 2.80%) 808186 ( 1.70%) 53.44 [2] pim 2 ( 0.00%) 136 ( 0.00%) 68.00 >>>>