EtherApe Example Output

This EtherApe output complements my article in eForensics Magazine which is coming out in 2014

<?xml version=”1.0″?>

<!– traffic data in bytes. last_heard in seconds from dump time –>

<etherape>

<header>

<capture_device>eth0</capture_device>

<timestamp>2013-12-03 20:44:47 -0500</timestamp>

</header>

<nodes>

<node>

<name>

<id>

<IP>74.125.139.102</IP>

</id>

<resolved_name>74.125.139.102</resolved_name>

<numeric_name>74.125.139.102</numeric_name>

</name>

<traffic_stats>

<active_packets>3</active_packets>

<in>

<stats>

<avg>676</avg>

<total>3938</total>

<avg_size>281</avg_size>

<packets>14</packets>

<last_heard>1.791343</last_heard>

</stats>

</in>

<out>

<stats>

<avg>412</avg>

<total>2197</total>

<avg_size>244</avg_size>

<packets>9</packets>

<last_heard>1.791393</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>1088</avg>

<total>6135</total>

<avg_size>267</avg_size>

<packets>23</packets>

<last_heard>1.791343</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>1088</avg>

<total>6135</total>

<avg_size>267</avg_size>

<packets>23</packets>

<last_heard>1.791343</last_heard>

</stats>

<name>

<id>

<link>60:c3:97:9d:2c:21</link>

</id>

<numeric_name>60:c3:97:9d:2c:21</numeric_name>

<accumulated>2727</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>1088</avg>

<total>6135</total>

<avg_size>267</avg_size>

<packets>23</packets>

<last_heard>1.791343</last_heard>

</stats>

<name>

<id>

<IP>74.125.139.102</IP>

</id>

<numeric_name>74.125.139.102</numeric_name>

<accumulated>2727</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>TCP</key>

<stats>

<avg>1088</avg>

<total>6135</total>

<avg_size>267</avg_size>

<packets>23</packets>

<last_heard>1.791343</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>HTTPS</key>

<stats>

<avg>1088</avg>

<total>6135</total>

<avg_size>267</avg_size>

<packets>23</packets>

<last_heard>1.791343</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>74.125.196.17</IP>

</id>

<resolved_name>74.125.196.17</resolved_name>

<numeric_name>74.125.196.17</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>9220</total>

<avg_size>200</avg_size>

<packets>46</packets>

<last_heard>51.841966</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>40930</total>

<avg_size>930</avg_size>

<packets>44</packets>

<last_heard>51.817908</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>50150</total>

<avg_size>557</avg_size>

<packets>90</packets>

<last_heard>51.817908</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>0</avg>

<total>50150</total>

<avg_size>557</avg_size>

<packets>90</packets>

<last_heard>51.817908</last_heard>

</stats>

<name>

<id>

<link>60:c3:97:9d:2c:21</link>

</id>

<numeric_name>60:c3:97:9d:2c:21</numeric_name>

<accumulated>11122</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>0</avg>

<total>50150</total>

<avg_size>557</avg_size>

<packets>90</packets>

<last_heard>51.817908</last_heard>

</stats>

<name>

<id>

<IP>74.125.196.17</IP>

</id>

<numeric_name>74.125.196.17</numeric_name>

<accumulated>11122</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>TCP</key>

<stats>

<avg>0</avg>

<total>50150</total>

<avg_size>557</avg_size>

<packets>90</packets>

<last_heard>51.817908</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>HTTPS</key>

<stats>

<avg>0</avg>

<total>50150</total>

<avg_size>557</avg_size>

<packets>90</packets>

<last_heard>51.817908</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>74.125.196.139</IP>

</id>

<resolved_name>74.125.196.139</resolved_name>

<numeric_name>74.125.196.139</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>764</total>

<avg_size>127</avg_size>

<packets>6</packets>

<last_heard>60.224175</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>405</total>

<avg_size>101</avg_size>

<packets>4</packets>

<last_heard>60.224187</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>1169</total>

<avg_size>117</avg_size>

<packets>10</packets>

<last_heard>60.224175</last_heard>

</stats>

</tot>

<protocols></protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>108.160.162.35</IP>

</id>

<resolved_name>108.160.162.35</resolved_name>

<numeric_name>108.160.162.35</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>1815</total>

<avg_size>363</avg_size>

<packets>5</packets>

<last_heard>34.916181</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>1555</total>

<avg_size>156</avg_size>

<packets>10</packets>

<last_heard>34.832547</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>3370</total>

<avg_size>225</avg_size>

<packets>15</packets>

<last_heard>34.832547</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>0</avg>

<total>3370</total>

<avg_size>225</avg_size>

<packets>15</packets>

<last_heard>34.832547</last_heard>

</stats>

<name>

<id>

<link>60:c3:97:9d:2c:21</link>

</id>

<numeric_name>60:c3:97:9d:2c:21</numeric_name>

<accumulated>2330</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>0</avg>

<total>3370</total>

<avg_size>225</avg_size>

<packets>15</packets>

<last_heard>34.832547</last_heard>

</stats>

<name>

<id>

<IP>108.160.162.35</IP>

</id>

<numeric_name>108.160.162.35</numeric_name>

<accumulated>2330</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>TCP</key>

<stats>

<avg>0</avg>

<total>3370</total>

<avg_size>225</avg_size>

<packets>15</packets>

<last_heard>34.832547</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>HTTP</key>

<stats>

<avg>0</avg>

<total>3370</total>

<avg_size>225</avg_size>

<packets>15</packets>

<last_heard>34.832547</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>173.194.37.78</IP>

</id>

<resolved_name>173.194.37.78</resolved_name>

<numeric_name>173.194.37.78</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>21123</total>

<avg_size>341</avg_size>

<packets>62</packets>

<last_heard>3.646564</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>7596</total>

<avg_size>149</avg_size>

<packets>51</packets>

<last_heard>3.646584</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>28719</total>

<avg_size>254</avg_size>

<packets>113</packets>

<last_heard>3.646564</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>0</avg>

<total>28719</total>

<avg_size>254</avg_size>

<packets>113</packets>

<last_heard>3.646564</last_heard>

</stats>

<name>

<id>

<link>60:c3:97:9d:2c:21</link>

</id>

<numeric_name>60:c3:97:9d:2c:21</numeric_name>

<accumulated>13689</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>0</avg>

<total>28719</total>

<avg_size>254</avg_size>

<packets>113</packets>

<last_heard>3.646564</last_heard>

</stats>

<name>

<id>

<IP>173.194.37.78</IP>

</id>

<numeric_name>173.194.37.78</numeric_name>

<accumulated>13689</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>TCP</key>

<stats>

<avg>0</avg>

<total>28719</total>

<avg_size>254</avg_size>

<packets>113</packets>

<last_heard>3.646564</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>HTTPS</key>

<stats>

<avg>0</avg>

<total>28719</total>

<avg_size>254</avg_size>

<packets>113</packets>

<last_heard>3.646564</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>192.168.1.64</IP>

</id>

<resolved_name>192.168.1.64</resolved_name>

<numeric_name>192.168.1.64</numeric_name>

</name>

<traffic_stats>

<active_packets>1</active_packets>

<in>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>281.209021</last_heard>

</stats>

</in>

<out>

<stats>

<avg>5232</avg>

<total>125775</total>

<avg_size>1283</avg_size>

<packets>98</packets>

<last_heard>1.087999</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>5232</avg>

<total>125775</total>

<avg_size>1283</avg_size>

<packets>98</packets>

<last_heard>1.087999</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>5232</avg>

<total>125775</total>

<avg_size>1283</avg_size>

<packets>98</packets>

<last_heard>1.087999</last_heard>

</stats>

<name>

<id>

<link>bc:c8:10:8b:eb:97</link>

</id>

<numeric_name>bc:c8:10:8b:eb:97</numeric_name>

<accumulated>19340</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>5232</avg>

<total>125775</total>

<avg_size>1283</avg_size>

<packets>98</packets>

<last_heard>1.087999</last_heard>

</stats>

<name>

<id>

<IP>192.168.1.64</IP>

</id>

<numeric_name>192.168.1.64</numeric_name>

<accumulated>19340</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>UDP</key>

<stats>

<avg>5232</avg>

<total>125635</total>

<avg_size>1309</avg_size>

<packets>96</packets>

<last_heard>1.087999</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>UDP-UNKNOWN</key>

<stats>

<avg>5232</avg>

<total>125635</total>

<avg_size>1309</avg_size>

<packets>96</packets>

<last_heard>1.087999</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>192.168.1.70</IP>

</id>

<resolved_name>192.168.1.70</resolved_name>

<numeric_name>192.168.1.70</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>66.032381</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>60</total>

<avg_size>60</avg_size>

<packets>1</packets>

<last_heard>66.032381</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>60</total>

<avg_size>60</avg_size>

<packets>1</packets>

<last_heard>66.032381</last_heard>

</stats>

</tot>

<protocols></protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>192.168.1.72</IP>

</id>

<resolved_name>192.168.1.72</resolved_name>

<numeric_name>192.168.1.72</numeric_name>

</name>

<traffic_stats>

<active_packets>3</active_packets>

<in>

<stats>

<avg>412</avg>

<total>55933</total>

<avg_size>400</avg_size>

<packets>140</packets>

<last_heard>1.791393</last_heard>

</stats>

</in>

<out>

<stats>

<avg>676</avg>

<total>41834</total>

<avg_size>235</avg_size>

<packets>178</packets>

<last_heard>1.791343</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>1088</avg>

<total>97767</total>

<avg_size>307</avg_size>

<packets>318</packets>

<last_heard>1.791343</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>1088</avg>

<total>97767</total>

<avg_size>307</avg_size>

<packets>318</packets>

<last_heard>1.791343</last_heard>

</stats>

<name>

<id>

<link>00:1e:68:80:14:21</link>

</id>

<numeric_name>00:1e:68:80:14:21</numeric_name>

<accumulated>38627</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>1088</avg>

<total>97767</total>

<avg_size>307</avg_size>

<packets>318</packets>

<last_heard>1.791343</last_heard>

</stats>

<name>

<id>

<IP>192.168.1.72</IP>

</id>

<numeric_name>192.168.1.72</numeric_name>

<accumulated>38627</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>TCP</key>

<stats>

<avg>1088</avg>

<total>90692</total>

<avg_size>347</avg_size>

<packets>261</packets>

<last_heard>1.791343</last_heard>

</stats>

</protocol>

<protocol>

<level>3</level>

<key>UDP</key>

<stats>

<avg>0</avg>

<total>6967</total>

<avg_size>127</avg_size>

<packets>55</packets>

<last_heard>18.850437</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>HTTPS</key>

<stats>

<avg>1088</avg>

<total>87322</total>

<avg_size>355</avg_size>

<packets>246</packets>

<last_heard>1.791343</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>DOMAIN</key>

<stats>

<avg>0</avg>

<total>4249</total>

<avg_size>118</avg_size>

<packets>36</packets>

<last_heard>22.357614</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>HTTP</key>

<stats>

<avg>0</avg>

<total>3370</total>

<avg_size>225</avg_size>

<packets>15</packets>

<last_heard>34.832547</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>UDP-UNKNOWN</key>

<stats>

<avg>0</avg>

<total>2592</total>

<avg_size>144</avg_size>

<packets>18</packets>

<last_heard>18.850437</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>MDNS</key>

<stats>

<avg>0</avg>

<total>126</total>

<avg_size>126</avg_size>

<packets>1</packets>

<last_heard>29.733287</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>192.168.1.254</IP>

</id>

<resolved_name>192.168.1.254</resolved_name>

<numeric_name>192.168.1.254</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>1404</total>

<avg_size>78</avg_size>

<packets>18</packets>

<last_heard>22.381496</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>2965</total>

<avg_size>148</avg_size>

<packets>20</packets>

<last_heard>22.357614</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>4369</total>

<avg_size>115</avg_size>

<packets>38</packets>

<last_heard>22.357614</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>0</avg>

<total>4369</total>

<avg_size>115</avg_size>

<packets>38</packets>

<last_heard>22.357614</last_heard>

</stats>

<name>

<id>

<link>60:c3:97:9d:2c:21</link>

</id>

<numeric_name>60:c3:97:9d:2c:21</numeric_name>

<accumulated>4215</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>0</avg>

<total>4369</total>

<avg_size>115</avg_size>

<packets>38</packets>

<last_heard>22.357614</last_heard>

</stats>

<name>

<id>

<IP>192.168.1.254</IP>

</id>

<numeric_name>192.168.1.254</numeric_name>

<accumulated>4215</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>UDP</key>

<stats>

<avg>0</avg>

<total>4249</total>

<avg_size>118</avg_size>

<packets>36</packets>

<last_heard>22.357614</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>DOMAIN</key>

<stats>

<avg>0</avg>

<total>4249</total>

<avg_size>118</avg_size>

<packets>36</packets>

<last_heard>22.357614</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>192.168.1.255</IP>

</id>

<resolved_name>192.168.1.255</resolved_name>

<numeric_name>192.168.1.255</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.850437</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>259.135792</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.850437</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.850437</last_heard>

</stats>

<name>

<id>

<link>ff:ff:ff:ff:ff:ff</link>

</id>

<numeric_name>ff:ff:ff:ff:ff:ff</numeric_name>

<accumulated>1296</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.850437</last_heard>

</stats>

<name>

<id>

<IP>192.168.1.255</IP>

</id>

<numeric_name>192.168.1.255</numeric_name>

<accumulated>1296</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>UDP</key>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.850437</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>UDP-UNKNOWN</key>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.850437</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>224.0.0.1</IP>

</id>

<resolved_name>224.0.0.1</resolved_name>

<numeric_name>224.0.0.1</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>60</total>

<avg_size>60</avg_size>

<packets>1</packets>

<last_heard>74.079694</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>74.079694</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>60</total>

<avg_size>60</avg_size>

<packets>1</packets>

<last_heard>74.079694</last_heard>

</stats>

</tot>

<protocols></protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>224.0.0.22</IP>

</id>

<resolved_name>224.0.0.22</resolved_name>

<numeric_name>224.0.0.22</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>184</total>

<avg_size>61</avg_size>

<packets>3</packets>

<last_heard>66.032381</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>68.655712</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>184</total>

<avg_size>61</avg_size>

<packets>3</packets>

<last_heard>66.032381</last_heard>

</stats>

</tot>

<protocols></protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>224.0.0.251</IP>

</id>

<resolved_name>224.0.0.251</resolved_name>

<numeric_name>224.0.0.251</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>126</total>

<avg_size>126</avg_size>

<packets>1</packets>

<last_heard>29.733287</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>29.733287</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>126</total>

<avg_size>126</avg_size>

<packets>1</packets>

<last_heard>29.733287</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>0</avg>

<total>126</total>

<avg_size>126</avg_size>

<packets>1</packets>

<last_heard>29.733287</last_heard>

</stats>

<name>

<id>

<link>01:00:5e:00:00:fb</link>

</id>

<numeric_name>01:00:5e:00:00:fb</numeric_name>

<accumulated>126</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>0</avg>

<total>126</total>

<avg_size>126</avg_size>

<packets>1</packets>

<last_heard>29.733287</last_heard>

</stats>

<name>

<id>

<IP>224.0.0.251</IP>

</id>

<numeric_name>224.0.0.251</numeric_name>

<accumulated>126</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>UDP</key>

<stats>

<avg>0</avg>

<total>126</total>

<avg_size>126</avg_size>

<packets>1</packets>

<last_heard>29.733287</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>MDNS</key>

<stats>

<avg>0</avg>

<total>126</total>

<avg_size>126</avg_size>

<packets>1</packets>

<last_heard>29.733287</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>239.255.255.250</IP>

</id>

<resolved_name>239.255.255.250</resolved_name>

<numeric_name>239.255.255.250</numeric_name>

</name>

<traffic_stats>

<active_packets>1</active_packets>

<in>

<stats>

<avg>5232</avg>

<total>125635</total>

<avg_size>1309</avg_size>

<packets>96</packets>

<last_heard>1.087999</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>281.209021</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>5232</avg>

<total>125635</total>

<avg_size>1309</avg_size>

<packets>96</packets>

<last_heard>1.087999</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>5232</avg>

<total>125635</total>

<avg_size>1309</avg_size>

<packets>96</packets>

<last_heard>1.087999</last_heard>

</stats>

<name>

<id>

<link>01:00:5e:7f:ff:fa</link>

</id>

<numeric_name>01:00:5e:7f:ff:fa</numeric_name>

<accumulated>19200</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>5232</avg>

<total>125635</total>

<avg_size>1309</avg_size>

<packets>96</packets>

<last_heard>1.087999</last_heard>

</stats>

<name>

<id>

<IP>239.255.255.250</IP>

</id>

<numeric_name>239.255.255.250</numeric_name>

<accumulated>19200</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>UDP</key>

<stats>

<avg>5232</avg>

<total>125635</total>

<avg_size>1309</avg_size>

<packets>96</packets>

<last_heard>1.087999</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>UDP-UNKNOWN</key>

<stats>

<avg>5232</avg>

<total>125635</total>

<avg_size>1309</avg_size>

<packets>96</packets>

<last_heard>1.087999</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IP>255.255.255.255</IP>

</id>

<resolved_name>255.255.255.255</resolved_name>

<numeric_name>255.255.255.255</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.851151</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>259.136559</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.851151</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.851151</last_heard>

</stats>

<name>

<id>

<link>ff:ff:ff:ff:ff:ff</link>

</id>

<numeric_name>ff:ff:ff:ff:ff:ff</numeric_name>

<accumulated>1296</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IP</key>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.851151</last_heard>

</stats>

<name>

<id>

<IP>255.255.255.255</IP>

</id>

<numeric_name>255.255.255.255</numeric_name>

<accumulated>1296</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>UDP</key>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.851151</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>UDP-UNKNOWN</key>

<stats>

<avg>0</avg>

<total>1296</total>

<avg_size>144</avg_size>

<packets>9</packets>

<last_heard>18.851151</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IPv6>fe80::21e:68ff:fe80:1421</IPv6>

</id>

<resolved_name>fe80::21e:68ff:fe80:1421</resolved_name>

<numeric_name>fe80::21e:68ff:fe80:1421</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>28.597577</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

<name>

<id>

<link>00:1e:68:80:14:21</link>

</id>

<numeric_name>00:1e:68:80:14:21</numeric_name>

<accumulated>107</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IPV6</key>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

<name>

<id>

<IPv6>fe80::21e:68ff:fe80:1421</IPv6>

</id>

<numeric_name>fe80::21e:68ff:fe80:1421</numeric_name>

<accumulated>107</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>UDP</key>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>MDNS</key>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

<node>

<name>

<id>

<IPv6>ff02::fb</IPv6>

</id>

<resolved_name>ff02::fb</resolved_name>

<numeric_name>ff02::fb</numeric_name>

</name>

<traffic_stats>

<active_packets>0</active_packets>

<in>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

</in>

<out>

<stats>

<avg>0</avg>

<total>0</total>

<avg_size>0</avg_size>

<packets>0</packets>

<last_heard>28.597577</last_heard>

</stats>

</out>

<tot>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

</tot>

<protocols><protocol>

<level>1</level>

<key>ETH_II</key>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

<name>

<id>

<link>33:33:00:00:00:fb</link>

</id>

<numeric_name>33:33:00:00:00:fb</numeric_name>

<accumulated>107</accumulated></name>

</protocol>

<protocol>

<level>2</level>

<key>IPV6</key>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

<name>

<id>

<IPv6>ff02::fb</IPv6>

</id>

<numeric_name>ff02::fb</numeric_name>

<accumulated>107</accumulated></name>

</protocol>

<protocol>

<level>3</level>

<key>UDP</key>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

</protocol>

<protocol>

<level>4</level>

<key>MDNS</key>

<stats>

<avg>0</avg>

<total>107</total>

<avg_size>107</avg_size>

<packets>1</packets>

<last_heard>28.597577</last_heard>

</stats>

</protocol>

</protocols>

</traffic_stats>

</node>

</nodes>

</etherape>