DumpFile: 2018-02-23_win13.pcap FileSize: 53.40MB Id: 197001010100 StartTime: Thu Jan 1 01:00:11 1970 EndTime: Fri Jan 9 20:48:24 1970 TotalTime: 762493.15 seconds TotalCapSize: 44.72MB CapLen: 1500 bytes # of packets: 569142 (44.72MB) AvgRate: 2.16Kbps stddev:1.63K PeakRate: 511.06Kbps ### IP flow (unique src/dst pair) Information ### # of flows: 101 (avg. 5635.07 pkts/flow) Top 10 big flow size (bytes/total in %): 3.9% 2.3% 1.9% 1.5% 1.4% 1.3% 1.2% 0.8% 0.8% 0.6% ### IP address Information ### # of IPv4 addresses: 45 Top 10 bandwidth usage (bytes/total in %): 31.9% 26.3% 17.0% 15.0% 14.6% 14.5% 13.3% 8.4% 8.0% 7.7% ### Packet Size Distribution (including MAC headers) ### <<<< [ 32- 63]: 193497 [ 64- 127]: 342999 [ 128- 255]: 26818 [ 256- 511]: 2321 [ 512- 1023]: 3465 [ 1024- 2047]: 42 >>>> ### Protocol Breakdown ### <<<< protocol packets bytes bytes/pkt ------------------------------------------------------------------------ [0] total 569142 (100.00%) 46888571 (100.00%) 82.38 [1] ip 89600 ( 15.74%) 10774616 ( 22.98%) 120.25 [2] tcp 30282 ( 5.32%) 1957043 ( 4.17%) 64.63 [3] ftpdata 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ftp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ssh 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] telnet 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] smtp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] name 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] dns 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] http(s) 5 ( 0.00%) 270 ( 0.00%) 54.00 [3] http(c) 5 ( 0.00%) 370 ( 0.00%) 74.00 [3] kerb5 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] pop3 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] sunrpc 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ident 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] nntp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] epmap 4 ( 0.00%) 280 ( 0.00%) 70.00 [3] netb-se 4 ( 0.00%) 280 ( 0.00%) 70.00 [3] imap 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] bgp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ldap 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] https 4 ( 0.00%) 256 ( 0.00%) 64.00 [3] ms-ds 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] rlogin 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] rtsp 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ldaps 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] socks 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] mssql-s 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] squid 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ms-gc 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] ms-gcs 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] mysql 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] realaud 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] icecast 4 ( 0.00%) 280 ( 0.00%) 70.00 [3] gnu6346 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc6666 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc6667 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc6668 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc6669 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] napster 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] irc7000 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] http-a 128 ( 0.02%) 8259 ( 0.02%) 64.52 [3] http-tw 2 ( 0.00%) 128 ( 0.00%) 64.00 [3] other 30060 ( 5.28%) 1942696 ( 4.14%) 64.63 [2] udp 36719 ( 6.45%) 7229913 ( 15.42%) 196.90 [3] dns 4 ( 0.00%) 348 ( 0.00%) 87.00 [3] sunrpc 1 ( 0.00%) 98 ( 0.00%) 98.00 [3] netb-ns 6064 ( 1.07%) 564098 ( 1.20%) 93.02 [3] netb-se 160 ( 0.03%) 39124 ( 0.08%) 244.53 [3] mcast 20330 ( 3.57%) 4841174 ( 10.32%) 238.13 [3] other 10160 ( 1.79%) 1785071 ( 3.81%) 175.70 [2] icmp 9341 ( 1.64%) 877950 ( 1.87%) 93.99 [2] igmp 13256 ( 2.33%) 709574 ( 1.51%) 53.53 [2] pim 2 ( 0.00%) 136 ( 0.00%) 68.00 >>>>