Ethernet Protocol Analysis

Total sample size: 100000 packets
Total number of bytes: 30015759
Average bytes per packet: 300.16

Percentage by Protocol Type
Protocol Name% of Total Packets% of Total Bytes
DOD Internet Protocol (IP)67.8489.92
Address Resolution Protocol (ARP) (for IP and for CHAOS)5.431.09
Banyan Systems0.010.00
DEC Maintenance Operation Protocol (MOP) Remote Console0.170.07
DECNET Phase IV, DNA Routing0.800.49
DEC Local Area Transport (LAT)0.500.24
DEC Local Area VAX Cluster (LAVC), System Communication Architecture (SCA)1.380.59
Reverse Address Resolution Protocol (RARP)0.020.00
DEC LanBridge Management0.420.08
DEC PATHWORKS DECnet NETBIOS Emulation0.030.02
Novell (old) NetWare IPX (ECONFIG E option)10.884.90
3Com (Formerly Bridge Communications), XNS Systems Management0.090.02
3Com (Formerly Bridge Communications), TCP/IP Systems Management0.090.02
Non-Ethernet II12.322.56


NetWare/IPX

Breakdown of IPX Packets
IPX Protocol% of IPX% of Total Packets
Unknown41.544.52
RIP34.503.75
SAP14.541.58
NCP0.400.04
NetBIOS9.010.98
6e0.020.00

Breakdown of IPX Sockets
IPX Socket% of IPX% of Total Packets
SAP40.534.41
RIP38.634.20
NetBIOS2.610.28
05500.050.01
05510.340.04
05531.710.19
05554.880.53
Dynamic(>4000)10.861.18
NCP0.400.04

Breakdown of NCP Requests
NCP Request% of NCP% of Total Packets
000332.560.01
Service reply67.440.03

IPX watchdog queries: 548


TCP/IP

Breakdown of IP Packets
IP Protocol Type% of IP% of Total Packets
ICMP0.160.11
IGMP0.120.08
TCP13.819.37
UDP85.7158.15
IDPR0.000.00
OSPFIGP0.190.13

Breakdown of TCP Packets
TCP Socket% of TCP% of Total Packets
Dynamic61.015.72
ftp0.020.00
imap0.200.02
lockd0.970.09
login5.190.49
nfsd31.432.94
pop30.050.01
smtp0.180.02
sunrpc0.010.00
telnet0.940.09

Breakdown of ICMP Packets
ICMP type% of ICMP% of Total Packets
Destination unreachable9.010.01
Echo request87.390.10
091.800.00
Timestamp request1.800.00


Non-Ethernet II

Breakdown of non-Ethernet II Packets
Packet Type% of non-Ethernet II% of Total Packets
00001.760.22
2c002.980.37
Appletalk91.9411.33
IPX 802.3/raw2.910.36


Ethernet Destinations

Breakdown by Ethernet destination
Destination Address% of Total Packets% of Total Bytes
00a0247846cd - 3com [PCMCIA 3C589C cards, maybe others]7.326.31
DoD Internet Multicast (RFC-1112)11.5717.52
DoD Internet Multicast (RFC-1112)1.241.92
DoD Internet Multicast (RFC-1112)7.1123.22
0800201b49bf - Sun1.503.88
0800201be6a7 - Sun20.6122.27
0800207d1e53 - Sun6.561.95
0800073c9af3 - Apple4.177.16
AppleTalk broadcast address9.791.73
Broadcast16.526.62

Total number of distinct destinations: 591

Breakdown of Broadcasts by Protocol
Protocol Type% of Broadcast Packets% of Broadcast Bytes% of Total Packets% of Total Bytes
Address Resolution Protocol (ARP) (for IP and for CHAOS)32.8016.385.421.08
DOD Internet Protocol (IP)5.1110.310.840.68
Novell (old) NetWare IPX (ECONFIG E option)58.5970.409.684.66
non-Ethernet II2.182.230.360.15


Ethernet Sources

Breakdown by Ethernet source
Source Address% of Total Packets% of Total Bytes
Sun[08002011be11]3.484.72
Sun[0800201b49bf]1.331.57
Sun[0800201be6a7]23.3220.45
Sun[0800207d1e53]4.116.96
Silicon Graphics[080069095ef6]20.7242.99
Apple[0800073c9af3]10.708.60
DEC Local logical address for systems running DECNET[aa000400de9d]1.431.11

Total number of distinct sources: 1537