Pcapline Output for evidence06.pcap

Notes

Times measured in seconds elapsed since first packet captured
The time of first packet capture may not be the time that the capture was started
Packet numbers refer to the input pcap file, and are indexed starting at '1', to match Wireshark's display
Flows of data are sorted by start time in ascending order
Non-data packets that arrive in the middle of data segments (normally just ACKs) are omitted from flow reports for brevity

Flow #	Protocol	Host 1	Host 2	Start Time	Last Packet Time	Bytes of Data	Packet #s
0001	TCP	10.10.10.70:1035	10.10.10.10:8080	0.000000	65.564956	6677	1 - 12, 1343
0002	TCP	10.10.10.70:1036	10.10.10.10:4444	1.265851	87.587480	1335961	13 - 1152, 1169 - 1173, 1188 - 1197, 1202 - 1206, 1219 - 1228, 1244 - 1312, 1344 - 1502, 1561 - 1565
0003	TCP	10.10.10.70:1037	10.10.10.10:4445	35.947030	40.986836	0	1153 - 1168, 1174 - 1187
0004	TCP	10.10.10.70:1038	10.10.10.10:4445	47.732517	52.689938	0	1198 - 1201, 1207 - 1218, 1229 - 1242
0005	UDP	10.10.10.70:138	10.10.10.255:138	55.409175	55.409175	119	1243
0006	TCP	10.10.10.70:1039	10.10.10.10:4445	59.462957	64.502478	0	1313 - 1342
0007	TCP	10.10.10.70:1040	10.10.10.10:4445	71.257992	76.205550	0	1503 - 1532
0008	TCP	10.10.10.70:1041	10.10.10.10:4445	82.993986	88.018132	0	1533 - 1560, 1566 - 1567
0009	TCP	10.10.10.70:1042	10.10.10.10:4445	94.878166	100.049324	0	1568 - 1597
0010	TCP	10.10.10.70:1043	10.10.10.10:4445	106.838688	111.971168	0	1598 - 1627
0011	TCP	10.10.10.70:1044	10.10.10.10:4445	118.746261	198.441738	844469	1628 - 2554