Statistics from sotm27.gz binary log file: =================================================================== Protocol Hierarchy Statistics Filter: frame frame frames:54536 bytes:17247037 eth frames:54536 bytes:17247037 ip frames:54536 bytes:17247037 udp frames:186 bytes:49962 nbns frames:129 bytes:26852 data frames:2 bytes:120 dcerpc frames:55 bytes:22990 tcp frames:54350 bytes:17197075 nbss frames:3769 bytes:2219209 smb frames:2506 bytes:511805 dcerpc frames:20 bytes:3800 pipe frames:1276 bytes:258208 dcerpc frames:1259 bytes:243638 samr frames:523 bytes:109330 malformed frames:1 bytes:1138 srvsvc frames:4 bytes:1416 data frames:17 bytes:14570 data frames:9 bytes:12466 data frames:69 bytes:104466 nbss frames:13 bytes:19682 data frames:1 bytes:1514 nbss frames:1 bytes:1514 nbss frames:1 bytes:1514 nbss frames:1 bytes:1514 nbss frames:1 bytes:1514 nbss frames:1 bytes:1514 nbss frames:1 bytes:1514 nbss frames:1 bytes:1514 http frames:12028 bytes:11481571 data frames:918 bytes:185975 ssl frames:1 bytes:105 irc frames:9809 bytes:1632635 =================================================================== ================================================================================ IO-USERS Statistics Type:ip Filter: | <- | | -> | | Total | | Frames Bytes | | Frames Bytes | | Frames Bytes | 172.16.134.191 <-> 209.196.44.172 8902 536112 9798 1630694 18700 2166806 172.16.134.191 <-> 207.172.16.150 5349 321956 8985 8688682 14334 9010638 172.16.134.191 <-> 24.197.194.106 6887 415834 4549 329903 11436 745737 172.16.134.191 <-> 61.111.101.78 1086 191102 1433 1403059 2519 1594161 172.16.134.191 <-> 210.22.204.101 994 204450 1165 494295 2159 698745 217.151.192.231 <-> 172.16.134.191 1028 1438183 536 35552 1564 1473735 172.16.134.191 <-> 64.0.96.9 154 9635 290 431104 444 440739 172.16.134.191 <-> 216.154.242.126 148 25421 236 189590 384 215011 172.16.134.191 <-> 209.45.125.69 138 22302 175 30630 313 52932 172.16.134.191 <-> 66.139.10.15 137 23892 174 32302 311 56194 129.116.182.239 <-> 172.16.134.191 156 26654 148 27220 304 53874 172.16.134.191 <-> 207.172.16.156 118 22132 118 115648 236 137780 172.16.134.191 <-> 128.242.214.10 62 6323 98 131834 160 138157 172.16.134.191 <-> 195.36.247.77 69 13824 80 12682 149 26506 207.68.171.238 <-> 172.16.134.191 77 43917 64 9807 141 53724 207.68.176.250 <-> 172.16.134.191 41 47744 37 6902 78 54646 172.16.134.191 <-> 217.140.0.47 33 2992 38 40638 71 43630 172.16.134.191 <-> 216.239.57.100 25 4978 35 25151 60 30129 217.151.192.226 <-> 172.16.134.191 26 20913 26 3672 52 24585 172.16.134.191 <-> 216.239.33.101 21 5215 27 7923 48 13138 198.49.161.200 <-> 172.16.134.191 29 38837 17 1217 46 40054 80.181.116.202 <-> 172.16.134.191 24 2719 16 2206 40 4925 172.16.134.191 <-> 66.8.163.125 16 1992 22 2970 38 4962 207.68.171.245 <-> 172.16.134.191 22 28277 16 1157 38 29434 172.16.134.191 <-> 68.169.174.108 15 6949 18 3416 33 10365 172.16.134.191 <-> 205.188.137.80 13 1291 12 7168 25 8459 216.170.214.226 <-> 172.16.134.191 13 1188 8 879 21 2067 172.16.134.191 <-> 194.68.68.39 11 1323 9 1633 20 2956 172.16.134.191 <-> 172.168.0.154 11 682 8 624 19 1306 172.16.134.191 <-> 63.241.174.144 8 531 9 788 17 1319 172.16.134.191 <-> 213.23.49.158 8 725 9 599 17 1324 172.16.134.191 <-> 207.46.196.108 8 953 8 4848 16 5801 172.16.134.191 <-> 213.84.75.42 8 749 8 638 16 1387 172.16.134.191 <-> 217.199.175.10 6 417 8 701 14 1118 172.16.134.191 <-> 216.239.51.100 8 1047 6 964 14 2011 172.16.134.191 <-> 192.130.71.66 6 362 7 463 13 825 206.151.167.254 <-> 172.16.134.191 5 2218 7 753 12 2971 194.192.187.194 <-> 172.16.134.191 6 879 6 711 12 1590 172.16.134.191 <-> 81.50.177.167 5 567 6 516 11 1083 172.16.134.191 <-> 164.125.76.48 4 507 6 516 10 1023 172.16.134.191 <-> 194.68.68.12 6 704 4 617 10 1321 172.16.134.191 <-> 65.57.83.13 5 653 5 925 10 1578 172.16.134.191 <-> 24.161.196.103 4 507 5 456 9 963 172.16.134.191 <-> 66.33.65.58 9 558 0 0 9 558 172.16.134.191 <-> 209.126.161.29 9 558 0 0 9 558 172.16.134.191 <-> 212.110.30.110 4 507 5 456 9 963 172.16.134.191 <-> 203.115.96.146 4 507 5 456 9 963 172.16.134.191 <-> 218.25.147.83 3 182 6 4379 9 4561 172.16.134.191 <-> 217.227.245.101 4 507 5 456 9 963 172.16.134.191 <-> 200.60.202.74 4 507 5 456 9 963 172.16.134.191 <-> 61.14.66.92 4 507 5 456 9 963 172.16.134.191 <-> 200.66.98.107 4 507 5 456 9 963 172.16.134.191 <-> 61.140.149.137 4 507 5 456 9 963 172.16.134.191 <-> 219.94.46.57 4 507 5 456 9 963 172.16.134.191 <-> 62.251.129.118 4 507 5 456 9 963 172.16.134.191 <-> 61.55.71.169 4 507 5 456 9 963 172.16.134.191 <-> 209.45.125.110 3 186 6 366 9 552 172.16.134.191 <-> 218.87.178.167 4 507 5 456 9 963 172.16.134.191 <-> 217.1.35.169 4 507 5 456 9 963 61.177.154.228 <-> 172.16.134.191 5 456 4 507 9 963 66.73.160.240 <-> 172.16.134.191 5 456 4 507 9 963 213.217.55.243 <-> 172.16.134.191 5 456 4 507 9 963 172.16.134.191 <-> 207.68.183.190 5 547 4 1181 9 1728 213.66.244.241 <-> 172.16.134.191 3 649 6 700 9 1349 172.16.134.191 <-> 207.46.196.120 5 768 4 758 9 1526 172.16.134.191 <-> 200.78.103.67 4 507 5 456 9 963 172.16.134.191 <-> 210.58.0.25 4 507 5 456 9 963 172.16.134.191 <-> 64.254.203.68 4 507 5 456 9 963 172.16.134.191 <-> 213.7.60.57 4 507 5 456 9 963 172.16.134.191 <-> 213.116.166.126 4 507 5 456 9 963 172.16.134.191 <-> 210.203.189.77 4 507 5 456 9 963 172.16.134.191 <-> 62.201.96.159 4 507 5 456 9 963 172.16.134.191 <-> 217.227.98.82 4 507 5 456 9 963 172.16.134.191 <-> 168.226.98.61 4 507 5 456 9 963 172.16.134.191 <-> 217.222.201.82 4 507 5 456 9 963 195.67.251.197 <-> 172.16.134.191 5 456 4 507 9 963 210.214.49.227 <-> 172.16.134.191 5 456 4 507 9 963 172.16.134.191 <-> 202.63.162.34 4 507 5 456 9 963 172.16.134.191 <-> 210.12.211.121 4 507 5 456 9 963 172.16.134.191 <-> 144.134.109.25 4 507 5 456 9 963 172.16.134.191 <-> 68.115.33.110 4 507 5 456 9 963 172.16.134.191 <-> 62.194.4.114 4 507 5 456 9 963 172.16.134.191 <-> 208.186.61.2 4 507 5 456 9 963 172.16.134.191 <-> 68.154.11.82 4 507 5 456 9 963 172.16.134.191 <-> 213.44.104.92 4 507 5 456 9 963 172.16.134.191 <-> 213.107.105.72 4 507 5 456 9 963 172.16.134.191 <-> 218.237.70.119 4 507 5 456 9 963 172.16.134.191 <-> 81.202.125.5 4 507 5 456 9 963 172.16.134.191 <-> 4.64.221.42 4 507 5 456 9 963 172.16.134.191 <-> 68.152.53.138 4 507 5 456 9 963 64.17.250.240 <-> 172.16.134.191 5 456 4 507 9 963 162.33.189.252 <-> 172.16.134.191 5 456 4 507 9 963 207.6.77.235 <-> 172.16.134.191 5 456 4 507 9 963 141.149.155.249 <-> 172.16.134.191 5 456 4 507 9 963 172.16.134.191 <-> 66.190.67.122 4 525 5 456 9 981 172.16.134.191 <-> 61.155.126.150 4 525 5 456 9 981 172.16.134.191 <-> 219.118.31.42 4 525 5 456 9 981 172.16.134.191 <-> 192.215.160.106 4 240 4 240 8 480 172.16.134.191 <-> 207.68.184.62 5 629 3 624 8 1253 172.16.134.191 <-> 194.199.201.9 3 180 3 180 6 360 172.16.134.191 <-> 203.170.177.8 3 180 3 222 6 402 172.16.134.191 <-> 169.254.205.177 3 186 2 156 5 342 172.16.134.191 <-> 218.163.9.89 2 405 3 214 5 619 172.16.134.191 <-> 61.150.72.7 0 0 4 1672 4 1672 172.16.134.191 <-> 199.107.7.2 3 186 0 0 3 186 172.16.134.191 <-> 61.132.88.90 0 0 3 1254 3 1254 172.16.134.191 <-> 203.106.55.12 1 325 1 92 2 417 172.16.134.191 <-> 216.228.8.158 1 325 1 92 2 417 172.16.134.191 <-> 61.150.120.72 0 0 2 836 2 836 172.16.134.191 <-> 81.114.77.37 1 325 1 92 2 417 172.16.134.191 <-> 219.65.37.37 1 325 1 92 2 417 211.149.57.197 <-> 172.16.134.191 1 92 1 325 2 417 172.16.134.191 <-> 148.235.82.146 1 325 1 92 2 417 24.107.117.237 <-> 172.16.134.191 1 92 1 325 2 417 218.4.99.237 <-> 172.16.134.191 2 836 0 0 2 836 172.16.134.191 <-> 141.85.37.78 1 60 1 74 2 134 172.16.134.191 <-> 61.134.45.19 0 0 2 836 2 836 172.16.134.191 <-> 61.11.11.54 1 325 1 92 2 417 172.16.134.191 <-> 204.50.186.37 1 60 1 74 2 134 172.16.134.191 <-> 200.74.26.73 1 60 1 60 2 120 172.16.134.191 <-> 66.92.135.108 1 325 1 92 2 417 172.16.134.191 <-> 210.111.56.66 1 60 1 62 2 122 172.16.134.191 <-> 219.145.211.132 0 0 1 418 1 418 172.16.134.191 <-> 218.4.65.115 0 0 1 418 1 418 172.16.134.191 <-> 212.122.20.74 0 0 1 418 1 418 172.16.134.191 <-> 67.81.161.166 0 0 1 418 1 418 172.16.134.191 <-> 61.185.215.42 0 0 1 418 1 418 172.16.134.191 <-> 205.180.159.35 0 0 1 418 1 418 172.16.134.191 <-> 219.145.211.3 0 0 1 418 1 418 172.16.134.191 <-> 217.35.65.9 0 0 1 418 1 418 172.16.134.191 <-> 61.177.62.66 0 0 1 418 1 418 172.16.134.191 <-> 61.203.104.148 0 0 1 418 1 418 172.16.134.191 <-> 68.45.123.130 0 0 1 418 1 418 172.16.134.191 <-> 218.244.66.32 0 0 1 418 1 418 172.16.134.191 <-> 61.185.242.190 0 0 1 418 1 418 172.16.134.191 <-> 213.122.77.74 0 0 1 418 1 418 172.16.134.191 <-> 200.135.228.10 0 0 1 418 1 418 172.16.134.191 <-> 212.162.165.18 0 0 1 418 1 418 172.16.134.191 <-> 218.4.48.74 0 0 1 418 1 418 172.16.134.191 <-> 213.170.56.83 0 0 1 418 1 418 172.16.134.191 <-> 61.185.212.166 0 0 1 418 1 418 81.57.217.208 <-> 172.16.134.191 1 418 0 0 1 418 172.16.134.191 <-> 24.74.199.104 0 0 1 418 1 418 172.16.134.191 <-> 4.33.244.44 0 0 1 418 1 418 172.16.134.191 <-> 212.243.23.179 0 0 1 74 1 74 172.16.134.191 <-> 61.185.29.9 0 0 1 418 1 418 172.16.134.191 <-> 216.192.145.21 0 0 1 418 1 418 168.243.103.205 <-> 172.16.134.191 1 418 0 0 1 418 172.16.134.191 <-> 216.229.73.11 0 0 1 418 1 418 172.16.134.191 <-> 61.132.88.50 0 0 1 418 1 418 172.16.134.191 <-> 218.92.13.142 0 0 1 418 1 418 172.16.134.191 <-> 12.83.147.97 0 0 1 418 1 418 172.16.134.191 <-> 12.253.142.87 0 0 1 418 1 418 172.16.134.191 <-> 200.50.124.2 0 0 1 418 1 418 66.233.4.225 <-> 172.16.134.191 1 418 0 0 1 418 68.84.210.227 <-> 172.16.134.191 1 418 0 0 1 418 172.16.134.191 <-> 61.8.1.64 0 0 1 418 1 418 172.16.134.191 <-> 67.201.75.38 0 0 1 418 1 418 172.16.134.191 <-> 24.167.221.106 0 0 1 418 1 418 172.16.134.191 <-> 61.177.56.98 0 0 1 418 1 418 172.16.134.191 <-> 66.81.131.17 0 0 1 418 1 418 172.16.134.191 <-> 218.4.87.137 0 0 1 418 1 418 206.149.148.192 <-> 172.16.134.191 1 418 0 0 1 418 62.150.170.232 <-> 172.16.134.191 1 60 0 0 1 60 62.127.38.198 <-> 172.16.134.191 1 92 0 0 1 92 172.16.134.191 <-> 12.252.61.161 0 0 1 418 1 418 172.16.134.191 <-> 68.37.54.69 0 0 1 418 1 418 172.16.134.191 <-> 62.150.170.134 0 0 1 60 1 60 ================================================================================ =================================================================== SMB RTT Statistics: Filter: Commands Calls Min RTT Max RTT Avg RTT Close 60 0.00000 0.01805 0.00231 Delete 7 0.00370 0.04568 0.01508 Transaction 641 0.00000 0.74464 0.02279 Read AndX 19 0.00000 0.00294 0.00150 Write AndX 45 0.00000 2.32724 0.67466 Tree Disconnect 18 0.00064 0.03879 0.00561 Negotiate Protocol 20 0.00001 0.09294 0.00864 Session Setup AndX 198 0.00000 0.11079 0.00585 Logoff AndX 97 0.00000 0.03728 0.00278 Tree Connect AndX 22 0.00000 0.01258 0.00420 NT Create AndX 61 0.00000 0.96704 0.02360 Transaction2 Commands Calls Min RTT Max RTT Avg RTT QUERY_FS_INFORMATION 8 0.00091 0.00819 0.00331 QUERY_PATH_INFORMATION 15 0.00098 0.04176 0.00708 QUERY_FILE_INFORMATION 8 0.00089 0.00304 0.00188 SET_FILE_INFORMATION 8 0.00000 0.01617 0.00649 GET_DFS_REFERRAL 3 0.00485 0.03025 0.01413 NT Transaction Commands Calls Min RTT Max RTT Avg RTT ===================================================================