<?xml version ="1.0"?>
<!--Generated by raxml(2.0.4.beta.1) QoSient, LLC-->
<ArgusDataStream
xmlns:xsi = "http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation = "http://qosient.com/argus/Xml/ArgusRecord.xsd"
BeginDate = "2001-12-18" BeginTime = "10:00:03" BeginTimeusec = "662555"
CurrentDate = "2001-12-18" CurrentTime = "10:00:03" CurrentTimeusec = "149634"
MajorVersion = "2" MinorVersion = "0" InterfaceType = "DLT_EN10MB" InterfaceStatus = "Up"
SourceId = "192.168.0.132" NetAddr = "192.168.0.0" NetMask = "255.255.255.0">
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20262" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:00" StartTimeusecs = "93105"
LastDate = "2001-12-18" LastTime = "10:00:00" LastTimeusecs = "240964"
Duration = "0.147859" TransRefNum = "7190">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.184.121" Proto = "tcp" Sport = "1612" Dport = "80" IpId = "5ecd" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK|SWIN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "26605" AckDatauSecs = "131" >
<TCPExtMetrics SrcTCPSeqBase = "2339404315" SrcTCPAckBytes = "293" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "0" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3328230119" DstTCPAckBytes = "513" DstTCPBytes = "513" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "4" SrcBytes = "650" DstBytes = "747" SrcAppBytes = "294" DstAppBytes = "513" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "57705" StdDev = "20076" MaxUsec = "77781" MinUsec = "37629" />
<SrcIdle n = "2" MeanUsec = "2856" StdDev = "731" MaxUsec = "3586" MinUsec = "2127" />
<DstActive n = "2" MeanUsec = "20122" StdDev = "17989" MaxUsec = "38111" MinUsec = "2134" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20263" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:00" StartTimeusecs = "95179"
LastDate = "2001-12-18" LastTime = "10:00:00" LastTimeusecs = "272036"
Duration = "0.176857" TransRefNum = "7191">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.184.121" Proto = "tcp" Sport = "1613" Dport = "80" IpId = "5ed2" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK|SWIN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "41793" AckDatauSecs = "114" >
<TCPExtMetrics SrcTCPSeqBase = "2339439625" SrcTCPAckBytes = "293" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "0" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "1793295381" DstTCPAckBytes = "493" DstTCPBytes = "493" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "4" SrcBytes = "650" DstBytes = "727" SrcAppBytes = "294" DstAppBytes = "493" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "64533" StdDev = "32846" MaxUsec = "97379" MinUsec = "31687" />
<SrcIdle n = "2" MeanUsec = "2942" StdDev = "632" MaxUsec = "3574" MinUsec = "2310" />
<DstActive n = "2" MeanUsec = "17258" StdDev = "14900" MaxUsec = "32158" MinUsec = "2359" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20264" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:00" StartTimeusecs = "204730"
LastDate = "2001-12-18" LastTime = "10:00:01" LastTimeusecs = "15162"
Duration = "0.810432" TransRefNum = "7192">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.184.121" Proto = "tcp" Sport = "1614" Dport = "80" IpId = "5edb" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "42129" AckDatauSecs = "81" >
<TCPExtMetrics SrcTCPSeqBase = "2339515563" SrcTCPAckBytes = "390" SrcTCPBytes = "390" SrcTCPRetrans = "0" SrcTCPWin = "31640" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "1071971894" DstTCPAckBytes = "5207" DstTCPBytes = "5207" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "7" SrcBytes = "866" DstBytes = "5603" SrcAppBytes = "390" DstAppBytes = "5207" />
<ArgusTimeStats>
<SrcActive n = "5" MeanUsec = "146763" StdDev = "99089" MaxUsec = "300041" MinUsec = "34614" />
<DstActive n = "3" MeanUsec = "120387" StdDev = "76653" MaxUsec = "208296" MinUsec = "21502" />
<DstIdle n = "3" MeanUsec = "135713" StdDev = "74964" MaxUsec = "232128" MinUsec = "49327" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20265" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:00" StartTimeusecs = "242002"
LastDate = "2001-12-18" LastTime = "10:00:00" LastTimeusecs = "464691"
Duration = "0.222689" TransRefNum = "7193">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.184.121" Proto = "tcp" Sport = "1615" Dport = "80" IpId = "5ed6" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "56632" AckDatauSecs = "101" >
<TCPExtMetrics SrcTCPSeqBase = "2339563528" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "78650666" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "81107" StdDev = "51104" MaxUsec = "132211" MinUsec = "30004" />
<DstActive n = "2" MeanUsec = "17328" StdDev = "14991" MaxUsec = "32319" MinUsec = "2337" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20266" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:01" StartTimeusecs = "955923"
LastDate = "2001-12-18" LastTime = "10:00:01" LastTimeusecs = "955923"
Duration = "0.000000" TransRefNum = "7194">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.16" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "138" Dport = "138" /> </Flow>
<IPAddrNames SrcName = "ptah.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "247" DstBytes = "0" SrcAppBytes = "205" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20267" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:05" StartTimeusecs = "651114"
LastDate = "2001-12-18" LastTime = "10:00:07" LastTimeusecs = "459649"
Duration = "1.808535" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5eef" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "279" SrcTCPBytes = "280" SrcTCPRetrans = "0" SrcTCPWin = "32767" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "507" DstTCPBytes = "508" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "19" DstCount = "15" SrcBytes = "1336" DstBytes = "1318" SrcAppBytes = "280" DstAppBytes = "508" />
<ArgusTimeStats>
<SrcActive n = "5" MeanUsec = "130439" StdDev = "64490" MaxUsec = "204955" MinUsec = "11840" />
<SrcIdle n = "13" MeanUsec = "88948" StdDev = "36062" MaxUsec = "136806" MinUsec = "8502" />
<DstIdle n = "13" MeanUsec = "137768" StdDev = "83101" MaxUsec = "290908" MinUsec = "10041" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20268" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:04" StartTimeusecs = "396486"
LastDate = "2001-12-18" LastTime = "10:00:04" LastTimeusecs = "396486"
Duration = "0.000000" TransRefNum = "7195">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20269" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:05" StartTimeusecs = "536223"
LastDate = "2001-12-18" LastTime = "10:00:05" LastTimeusecs = "767544"
Duration = "0.231321" TransRefNum = "63">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "205.188.10.47" Proto = "tcp" Sport = "1866" Dport = "5190" IpId = "5edc" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "205.188.10.47" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2624202979" SrcTCPAckBytes = "5" SrcTCPBytes = "6" SrcTCPRetrans = "0" SrcTCPWin = "31942" SrcTCPFlags = "PA"
DstTCPSeqBase = "3205297455" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "A" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "6" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20270" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:08" StartTimeusecs = "388438"
LastDate = "2001-12-18" LastTime = "10:00:10" LastTimeusecs = "319887"
Duration = "1.931449" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5f01" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "279" SrcTCPBytes = "280" SrcTCPRetrans = "0" SrcTCPWin = "32507" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "259" DstTCPBytes = "312" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "18" DstCount = "15" SrcBytes = "1276" DstBytes = "1122" SrcAppBytes = "280" DstAppBytes = "312" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "132952" StdDev = "21898" MaxUsec = "169406" MinUsec = "114927" />
<SrcIdle n = "14" MeanUsec = "166188" StdDev = "227640" MaxUsec = "928789" MinUsec = "19690" />
<DstIdle n = "14" MeanUsec = "200045" StdDev = "238807" MaxUsec = "930076" MinUsec = "10200" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20271" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:10" StartTimeusecs = "463278"
LastDate = "2001-12-18" LastTime = "10:00:12" LastTimeusecs = "299736"
Duration = "1.836458" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5f08" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "119" SrcTCPBytes = "120" SrcTCPRetrans = "0" SrcTCPWin = "32355" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "151" DstTCPBytes = "120" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "7" DstCount = "7" SrcBytes = "504" DstBytes = "498" SrcAppBytes = "120" DstAppBytes = "120" />
<ArgusTimeStats>
<SrcIdle n = "6" MeanUsec = "304781" StdDev = "532917" MaxUsec = "1496004" MinUsec = "37694" />
<DstIdle n = "6" MeanUsec = "55028" StdDev = "29796" MaxUsec = "80038" MinUsec = "247" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20272" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:13" StartTimeusecs = "980595"
LastDate = "2001-12-18" LastTime = "10:00:13" LastTimeusecs = "981222"
Duration = "0.000627" TransRefNum = "7196">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "0.0.0.0" DstIPAddr = "192.168.0.16" Proto = "udp" Sport = "68" Dport = "67" /> </Flow>
<IPAddrNames SrcName = "0.0.0.0" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "290" DstBytes = "342" SrcAppBytes = "248" DstAppBytes = "300" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20273" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:12" StartTimeusecs = "466197"
LastDate = "2001-12-18" LastTime = "10:00:13" LastTimeusecs = "779815"
Duration = "1.313618" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5f16" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "159" SrcTCPBytes = "160" SrcTCPRetrans = "0" SrcTCPWin = "31951" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "403" DstTCPBytes = "384" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "14" DstCount = "10" SrcBytes = "952" DstBytes = "924" SrcAppBytes = "160" DstAppBytes = "384" />
<ArgusTimeStats>
<SrcActive n = "6" MeanUsec = "123447" StdDev = "53698" MaxUsec = "174229" MinUsec = "9208" />
<SrcIdle n = "8" MeanUsec = "93395" StdDev = "111901" MaxUsec = "380126" MinUsec = "848" />
<DstActive n = "2" MeanUsec = "52308" StdDev = "45805" MaxUsec = "98113" MinUsec = "6503" />
<DstIdle n = "8" MeanUsec = "171916" StdDev = "146215" MaxUsec = "510040" MinUsec = "246" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20274" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:21" StartTimeusecs = "992157"
LastDate = "2001-12-18" LastTime = "10:00:21" LastTimeusecs = "992746"
Duration = "0.000589" TransRefNum = "7197">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "0.0.0.0" DstIPAddr = "192.168.0.16" Proto = "udp" Sport = "68" Dport = "67" /> </Flow>
<IPAddrNames SrcName = "0.0.0.0" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "290" DstBytes = "342" SrcAppBytes = "248" DstAppBytes = "300" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20275" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:30" StartTimeusecs = "3844"
LastDate = "2001-12-18" LastTime = "10:00:30" LastTimeusecs = "4526"
Duration = "0.000682" TransRefNum = "7197">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "0.0.0.0" DstIPAddr = "192.168.0.16" Proto = "udp" Sport = "68" Dport = "67" /> </Flow>
<IPAddrNames SrcName = "0.0.0.0" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "290" DstBytes = "342" SrcAppBytes = "248" DstAppBytes = "300" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20276" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:31" StartTimeusecs = "51424"
LastDate = "2001-12-18" LastTime = "10:00:31" LastTimeusecs = "197317"
Duration = "0.145893" TransRefNum = "7200">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.153" Proto = "tcp" Sport = "1618" Dport = "80" IpId = "5f28" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK|SWIN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "28043" AckDatauSecs = "139" >
<TCPExtMetrics SrcTCPSeqBase = "2347395250" SrcTCPAckBytes = "293" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "0" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "341632396" DstTCPAckBytes = "513" DstTCPBytes = "513" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "4" SrcBytes = "650" DstBytes = "747" SrcAppBytes = "294" DstAppBytes = "513" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "56547" StdDev = "29392" MaxUsec = "85939" MinUsec = "27156" />
<SrcIdle n = "2" MeanUsec = "2308" StdDev = "1255" MaxUsec = "3563" MinUsec = "1053" />
<DstActive n = "2" MeanUsec = "21544" StdDev = "20426" MaxUsec = "41970" MinUsec = "1118" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20277" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:30" StartTimeusecs = "500427"
LastDate = "2001-12-18" LastTime = "10:00:30" LastTimeusecs = "651528"
Duration = "0.151101" TransRefNum = "7198">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.121" Proto = "tcp" Sport = "1616" Dport = "80" IpId = "5f1d" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK|SWIN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "27744" AckDatauSecs = "121" >
<TCPExtMetrics SrcTCPSeqBase = "2347184167" SrcTCPAckBytes = "293" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "0" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "489987458" DstTCPAckBytes = "493" DstTCPBytes = "493" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "4" SrcBytes = "650" DstBytes = "727" SrcAppBytes = "294" DstAppBytes = "493" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "58674" StdDev = "25355" MaxUsec = "84029" MinUsec = "33320" />
<SrcIdle n = "2" MeanUsec = "2943" StdDev = "610" MaxUsec = "3552" MinUsec = "2335" />
<DstActive n = "2" MeanUsec = "18090" StdDev = "15683" MaxUsec = "33773" MinUsec = "2407" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20278" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:30" StartTimeusecs = "619389"
LastDate = "2001-12-18" LastTime = "10:00:30" LastTimeusecs = "790251"
Duration = "0.170862" TransRefNum = "7199">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.121" Proto = "tcp" Sport = "1617" Dport = "80" IpId = "5f21" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "36570" AckDatauSecs = "74" >
<TCPExtMetrics SrcTCPSeqBase = "2347243875" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "2766410256" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "65238" StdDev = "28862" MaxUsec = "94100" MinUsec = "36376" />
<DstActive n = "2" MeanUsec = "20787" StdDev = "18449" MaxUsec = "39236" MinUsec = "2338" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20279" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:31" StartTimeusecs = "172565"
LastDate = "2001-12-18" LastTime = "10:00:31" LastTimeusecs = "329125"
Duration = "0.156560" TransRefNum = "7201">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.153" Proto = "tcp" Sport = "1619" Dport = "80" IpId = "5f2c" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "30567" AckDatauSecs = "68" >
<TCPExtMetrics SrcTCPSeqBase = "2347467091" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3240166741" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "61120" StdDev = "36073" MaxUsec = "97193" MinUsec = "25048" />
<DstActive n = "2" MeanUsec = "15950" StdDev = "13611" MaxUsec = "29561" MinUsec = "2339" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20280" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:38" StartTimeusecs = "15409"
LastDate = "2001-12-18" LastTime = "10:00:38" LastTimeusecs = "16000"
Duration = "0.000591" TransRefNum = "7197">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "0.0.0.0" DstIPAddr = "192.168.0.16" Proto = "udp" Sport = "68" Dport = "67" /> </Flow>
<IPAddrNames SrcName = "0.0.0.0" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "290" DstBytes = "342" SrcAppBytes = "248" DstAppBytes = "300" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20281" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:34" StartTimeusecs = "396303"
LastDate = "2001-12-18" LastTime = "10:00:34" LastTimeusecs = "396303"
Duration = "0.000000" TransRefNum = "7202">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20282" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:47" StartTimeusecs = "243214"
LastDate = "2001-12-18" LastTime = "10:00:47" LastTimeusecs = "492928"
Duration = "0.249714" TransRefNum = "7204">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "206.46.170.10" Proto = "tcp" Sport = "1623" Dport = "110" IpId = "5f5d" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "mta1pub.gte.net" />
<FlowAttrs SrcTTL = "128" DstTTL = "39" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST" TCPOptions = "MAX|SACKOK" SynAckuSecs = "76447" AckDatauSecs = "82" >
<TCPExtMetrics SrcTCPSeqBase = "2351740861" SrcTCPAckBytes = "14" SrcTCPBytes = "28" SrcTCPRetrans = "0" SrcTCPWin = "32703" SrcTCPFlags = "SPA"
DstTCPSeqBase = "3239693824" DstTCPAckBytes = "63" DstTCPBytes = "64" DstTCPRetrans = "0" DstTCPWin = "25200" DstTCPFlags = "SPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "4" DstCount = "4" SrcBytes = "258" DstBytes = "294" SrcAppBytes = "28" DstAppBytes = "64" />
<ArgusTimeStats>
<SrcIdle n = "2" MeanUsec = "86592" StdDev = "5135" MaxUsec = "91720" MinUsec = "81465" />
<DstIdle n = "2" MeanUsec = "41836" StdDev = "39027" MaxUsec = "80863" MinUsec = "2810" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20283" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:47" StartTimeusecs = "220029"
LastDate = "2001-12-18" LastTime = "10:00:47" LastTimeusecs = "418701"
Duration = "0.198672" TransRefNum = "7071">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:c0:4f:7b:e0:87" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.16" Proto = "tcp" Sport = "1525" Dport = "1291" IpId = "5f51" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST" TCPOptions = "MAX|SACKOK" SynAckuSecs = "90" AckDatauSecs = "85" >
<TCPExtMetrics SrcTCPSeqBase = "2181598035" SrcTCPAckBytes = "831" SrcTCPBytes = "832" SrcTCPRetrans = "0" SrcTCPWin = "31407" SrcTCPFlags = "PA"
DstTCPSeqBase = "3330826188" DstTCPAckBytes = "607" DstTCPBytes = "608" DstTCPRetrans = "0" DstTCPWin = "17344" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "1108" DstBytes = "824" SrcAppBytes = "832" DstAppBytes = "608" />
<ArgusTimeStats>
<SrcIdle n = "3" MeanUsec = "5169" StdDev = "2135" MaxUsec = "8160" MinUsec = "3308" />
<DstIdle n = "3" MeanUsec = "4540" StdDev = "3392" MaxUsec = "9334" MinUsec = "1986" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20284" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:47" StartTimeusecs = "229208"
LastDate = "2001-12-18" LastTime = "10:00:47" LastTimeusecs = "743212"
Duration = "0.514004" TransRefNum = "7203">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "216.92.197.167" Proto = "tcp" Sport = "1621" Dport = "110" IpId = "5f69" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "47" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "41430" AckDatauSecs = "130" >
<TCPExtMetrics SrcTCPSeqBase = "2351622162" SrcTCPAckBytes = "44" SrcTCPBytes = "44" SrcTCPRetrans = "0" SrcTCPWin = "32730" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "4197053069" DstTCPAckBytes = "37" DstTCPBytes = "37" DstTCPRetrans = "0" DstTCPWin = "16800" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "10" SrcBytes = "616" DstBytes = "603" SrcAppBytes = "44" DstAppBytes = "37" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "74445" StdDev = "77636" MaxUsec = "181903" MinUsec = "1201" />
<SrcIdle n = "5" MeanUsec = "41432" StdDev = "2593" MaxUsec = "45706" MinUsec = "38488" />
<DstActive n = "2" MeanUsec = "21779" StdDev = "20263" MaxUsec = "42042" MinUsec = "1517" />
<DstIdle n = "7" MeanUsec = "61287" StdDev = "50335" MaxUsec = "184472" MinUsec = "37975" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20285" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:49" StartTimeusecs = "920742"
LastDate = "2001-12-18" LastTime = "10:00:50" LastTimeusecs = "3687"
Duration = "0.082945" TransRefNum = "7204">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "206.46.170.10" Proto = "tcp" Sport = "1623" Dport = "110" IpId = "5f6a" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "mta1pub.gte.net" />
<FlowAttrs SrcTTL = "128" DstTTL = "39" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|SRTN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "76447" AckDatauSecs = "82" >
<TCPExtMetrics SrcTCPSeqBase = "2351740861" SrcTCPAckBytes = "12" SrcTCPBytes = "13" SrcTCPRetrans = "1" SrcTCPWin = "32703" SrcTCPFlags = "PA"
DstTCPSeqBase = "3239693824" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "25200" DstTCPFlags = "A" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "67" DstBytes = "60" SrcAppBytes = "13" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20286" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:00:52" StartTimeusecs = "180640"
LastDate = "2001-12-18" LastTime = "10:00:52" LastTimeusecs = "756142"
Duration = "0.575502" TransRefNum = "7204">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "206.46.170.10" Proto = "tcp" Sport = "1623" Dport = "110" IpId = "5f82" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "mta1pub.gte.net" />
<FlowAttrs SrcTTL = "128" DstTTL = "39" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "76447" AckDatauSecs = "82" >
<TCPExtMetrics SrcTCPSeqBase = "2351740861" SrcTCPAckBytes = "18" SrcTCPBytes = "18" SrcTCPRetrans = "0" SrcTCPWin = "32596" SrcTCPFlags = "FPA"
DstTCPSeqBase = "3239693824" DstTCPAckBytes = "107" DstTCPBytes = "107" DstTCPRetrans = "0" DstTCPWin = "25200" DstTCPFlags = "FPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "7" SrcBytes = "360" DstBytes = "500" SrcAppBytes = "18" DstAppBytes = "107" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "115686" StdDev = "111032" MaxUsec = "266761" MinUsec = "3075" />
<SrcIdle n = "3" MeanUsec = "804597" StdDev = "1031095" MaxUsec = "2262786" MinUsec = "74237" />
<DstActive n = "2" MeanUsec = "39022" StdDev = "35624" MaxUsec = "74646" MinUsec = "3398" />
<DstIdle n = "5" MeanUsec = "534882" StdDev = "824223" MaxUsec = "2176953" MinUsec = "75274" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20287" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:00" StartTimeusecs = "815095"
LastDate = "2001-12-18" LastTime = "10:01:00" LastTimeusecs = "962722"
Duration = "0.147627" TransRefNum = "7205">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.184.121" Proto = "tcp" Sport = "1624" Dport = "80" IpId = "5f88" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "29664" AckDatauSecs = "128" >
<TCPExtMetrics SrcTCPSeqBase = "2355149263" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32254" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "902301680" DstTCPAckBytes = "513" DstTCPBytes = "513" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "747" SrcAppBytes = "294" DstAppBytes = "513" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "55842" StdDev = "16345" MaxUsec = "72186" MinUsec = "39499" />
<DstActive n = "2" MeanUsec = "21298" StdDev = "18680" MaxUsec = "39978" MinUsec = "2618" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20288" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:00" StartTimeusecs = "924176"
LastDate = "2001-12-18" LastTime = "10:01:01" LastTimeusecs = "88165"
Duration = "0.163989" TransRefNum = "7206">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.153" Proto = "tcp" Sport = "1625" Dport = "80" IpId = "5f8c" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "39484" AckDatauSecs = "67" >
<TCPExtMetrics SrcTCPSeqBase = "2355234583" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3206111759" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "60414" StdDev = "30271" MaxUsec = "90685" MinUsec = "30143" />
<DstActive n = "2" MeanUsec = "18019" StdDev = "15683" MaxUsec = "33702" MinUsec = "2336" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20289" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:01" StartTimeusecs = "364979"
LastDate = "2001-12-18" LastTime = "10:01:01" LastTimeusecs = "513263"
Duration = "0.148284" TransRefNum = "7207">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.153" Proto = "tcp" Sport = "1626" Dport = "80" IpId = "5f92" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "27611" AckDatauSecs = "117" >
<TCPExtMetrics SrcTCPSeqBase = "2355419944" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32234" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "921806280" DstTCPAckBytes = "533" DstTCPBytes = "533" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "767" SrcAppBytes = "294" DstAppBytes = "533" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "57326" StdDev = "24654" MaxUsec = "81980" MinUsec = "32673" />
<DstActive n = "2" MeanUsec = "17793" StdDev = "15384" MaxUsec = "33177" MinUsec = "2409" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20290" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:01" StartTimeusecs = "481745"
LastDate = "2001-12-18" LastTime = "10:01:01" LastTimeusecs = "655403"
Duration = "0.173658" TransRefNum = "7208">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.153" Proto = "tcp" Sport = "1627" Dport = "80" IpId = "5f96" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "40043" AckDatauSecs = "107" >
<TCPExtMetrics SrcTCPSeqBase = "2355478664" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "2320435747" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "55014" StdDev = "28305" MaxUsec = "83319" MinUsec = "26710" />
<DstActive n = "2" MeanUsec = "16660" StdDev = "14287" MaxUsec = "30947" MinUsec = "2373" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20291" Cause = "Stop"
StartDate = "2001-12-18" StartTime = "10:01:05" StartTimeusecs = "733829"
LastDate = "2001-12-18" LastTime = "10:01:05" LastTimeusecs = "735227"
Duration = "0.001398" TransRefNum = "19">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.1" Proto = "udp" Sport = "137" Dport = "137" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "router.newyork.qosient.com" />
<FlowAttrs Status = "ICMP_MAPPED" SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "110" DstBytes = "0" SrcAppBytes = "68" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20292" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:03" StartTimeusecs = "540672"
LastDate = "2001-12-18" LastTime = "10:01:03" LastTimeusecs = "770556"
Duration = "0.229884" TransRefNum = "63">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "205.188.10.47" Proto = "tcp" Sport = "1866" Dport = "5190" IpId = "5f97" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "205.188.10.47" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2624202979" SrcTCPAckBytes = "5" SrcTCPBytes = "6" SrcTCPRetrans = "0" SrcTCPWin = "31942" SrcTCPFlags = "PA"
DstTCPSeqBase = "3205297455" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "A" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "6" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20293" Cause = "Stop"
StartDate = "2001-12-18" StartTime = "10:01:07" StartTimeusecs = "235985"
LastDate = "2001-12-18" LastTime = "10:01:07" LastTimeusecs = "237344"
Duration = "0.001359" TransRefNum = "19">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.1" Proto = "udp" Sport = "137" Dport = "137" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "router.newyork.qosient.com" />
<FlowAttrs Status = "ICMP_MAPPED" SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "110" DstBytes = "0" SrcAppBytes = "68" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20294" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:04" StartTimeusecs = "396118"
LastDate = "2001-12-18" LastTime = "10:01:04" LastTimeusecs = "396118"
Duration = "0.000000" TransRefNum = "7209">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20295" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:05" StartTimeusecs = "735227"
LastDate = "2001-12-18" LastTime = "10:01:07" LastTimeusecs = "237344"
Duration = "1.502117" TransRefNum = "20">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "0:1:3:1d:93:a" />
<Flow> <ICMP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.64" Proto = "icmp" IcmpType = "UR" IcmpCode = "Port" IcmpData = "137"/> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "sphynx.newyork.qosient.com" />
<FlowAttrs SrcTTL = "254" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "2" DstCount = "0" SrcBytes = "140" DstBytes = "0" SrcAppBytes = "72" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20296" Cause = "Stop"
StartDate = "2001-12-18" StartTime = "10:01:08" StartTimeusecs = "738170"
LastDate = "2001-12-18" LastTime = "10:01:08" LastTimeusecs = "739535"
Duration = "0.001365" TransRefNum = "19">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.1" Proto = "udp" Sport = "137" Dport = "137" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "router.newyork.qosient.com" />
<FlowAttrs Status = "ICMP_MAPPED" SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "110" DstBytes = "0" SrcAppBytes = "68" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20297" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:08" StartTimeusecs = "739535"
LastDate = "2001-12-18" LastTime = "10:01:08" LastTimeusecs = "739535"
Duration = "0.000000" TransRefNum = "20">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "0:1:3:1d:93:a" />
<Flow> <ICMP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.64" Proto = "icmp" IcmpType = "UR" IcmpCode = "Port" IcmpData = "137"/> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "sphynx.newyork.qosient.com" />
<FlowAttrs SrcTTL = "254" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "70" DstBytes = "0" SrcAppBytes = "36" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20298" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:13" StartTimeusecs = "522152"
LastDate = "2001-12-18" LastTime = "10:01:13" LastTimeusecs = "524271"
Duration = "0.002119" TransRefNum = "7210">
<MACAddrs SrcAddr = "0:2:2d:4:9f:56" DstAddr = "0:c0:4f:7b:e0:87" />
<Flow> <IP SrcIPAddr = "192.168.0.161" DstIPAddr = "192.168.0.16" Proto = "udp" Sport = "123" Dport = "123" /> </Flow>
<IPAddrNames SrcName = "set.newyork.qosient.com" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "110" DstBytes = "110" SrcAppBytes = "68" DstAppBytes = "68" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20299" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:13" StartTimeusecs = "519337"
LastDate = "2001-12-18" LastTime = "10:01:13" LastTimeusecs = "519424"
Duration = "0.000087" TransRefNum = "7170">
<Flow> <Arp SrcArpAddr = "192.168.0.161" TargetArpAaddr = "192.168.0.16" ArpMacAddr = "0:2:2d:4:9f:56" /> </Flow>
<IPAddrNames SrcName = "set.newyork.qosient.com" TargetName = "ptah.newyork.qosient.com" />
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "18" DstAppBytes = "18" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20300" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:29" StartTimeusecs = "40279"
LastDate = "2001-12-18" LastTime = "10:01:30" LastTimeusecs = "179384"
Duration = "1.139105" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5fa5" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "119" SrcTCPBytes = "120" SrcTCPRetrans = "0" SrcTCPWin = "31767" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "183" DstTCPBytes = "184" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "11" DstCount = "6" SrcBytes = "744" DstBytes = "508" SrcAppBytes = "120" DstAppBytes = "184" />
<ArgusTimeStats>
<SrcActive n = "5" MeanUsec = "162887" StdDev = "21254" MaxUsec = "185237" MinUsec = "126091" />
<SrcIdle n = "5" MeanUsec = "64933" StdDev = "38827" MaxUsec = "132859" MinUsec = "16654" />
<DstIdle n = "5" MeanUsec = "204049" StdDev = "77608" MaxUsec = "289736" MinUsec = "59961" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20301" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:32" StartTimeusecs = "474790"
LastDate = "2001-12-18" LastTime = "10:01:34" LastTimeusecs = "321773"
Duration = "1.846983" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5fa7" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "19" SrcTCPBytes = "20" SrcTCPRetrans = "0" SrcTCPWin = "31747" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "19" DstTCPBytes = "40" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "2" DstCount = "2" SrcBytes = "134" DstBytes = "148" SrcAppBytes = "20" DstAppBytes = "40" />
<ArgusTimeStats>
<DstIdle n = "2" MeanUsec = "2129920" StdDev = "282937" MaxUsec = "2412857" MinUsec = "1846983" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20302" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:34" StartTimeusecs = "485644"
LastDate = "2001-12-18" LastTime = "10:01:34" LastTimeusecs = "485644"
Duration = "0.000000" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5fa8" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "0" SrcTCPBytes = "0" SrcTCPRetrans = "0" SrcTCPWin = "31727" SrcTCPFlags = "A"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "19" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "0" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20303" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:34" StartTimeusecs = "395937"
LastDate = "2001-12-18" LastTime = "10:01:34" LastTimeusecs = "395937"
Duration = "0.000000" TransRefNum = "7211">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20304" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:36" StartTimeusecs = "395854"
LastDate = "2001-12-18" LastTime = "10:01:36" LastTimeusecs = "395854"
Duration = "0.000000" TransRefNum = "7">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "1:0:5e:0:0:2" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "224.0.0.2" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "all-routers.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20305" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:36" StartTimeusecs = "394973"
LastDate = "2001-12-18" LastTime = "10:01:36" LastTimeusecs = "394973"
Duration = "0.000000" TransRefNum = "5">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "1:0:5e:0:0:1" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "224.0.0.1" Proto = "igmp" Sport = "17" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "all-systems.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20306" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:36" StartTimeusecs = "594068"
LastDate = "2001-12-18" LastTime = "10:01:38" LastTimeusecs = "493101"
Duration = "1.899033" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5fb0" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "79" SrcTCPBytes = "80" SrcTCPRetrans = "0" SrcTCPWin = "31647" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "79" DstTCPBytes = "80" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "4" SrcBytes = "536" DstBytes = "296" SrcAppBytes = "80" DstAppBytes = "80" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "173803" StdDev = "34768" MaxUsec = "209922" MinUsec = "118294" />
<SrcIdle n = "4" MeanUsec = "828060" StdDev = "747632" MaxUsec = "2108424" MinUsec = "292446" />
<DstIdle n = "4" MeanUsec = "992537" StdDev = "755233" MaxUsec = "2280151" MinUsec = "439916" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20307" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:36" StartTimeusecs = "395430"
LastDate = "2001-12-18" LastTime = "10:01:36" LastTimeusecs = "395430"
Duration = "0.000000" TransRefNum = "6">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "1:0:5e:0:0:c" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "224.0.0.12" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "dhcp-agents.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20308" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:38" StartTimeusecs = "977401"
LastDate = "2001-12-18" LastTime = "10:01:38" LastTimeusecs = "977401"
Duration = "0.000000" TransRefNum = "9">
<MACAddrs SrcAddr = "0:2:2d:4:9f:56" DstAddr = "1:0:5e:0:0:9" />
<Flow> <IP SrcIPAddr = "192.168.0.161" DstIPAddr = "224.0.0.9" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "set.newyork.qosient.com" DstName = "rip2-routers.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20309" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:37" StartTimeusecs = "343176"
LastDate = "2001-12-18" LastTime = "10:01:37" LastTimeusecs = "343176"
Duration = "0.000000" TransRefNum = "10">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "1:0:5e:0:1:18" />
<Flow> <IP SrcIPAddr = "192.168.0.16" DstIPAddr = "224.0.1.24" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "ptah.newyork.qosient.com" DstName = "microsoft-ds.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20310" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:38" StartTimeusecs = "868062"
LastDate = "2001-12-18" LastTime = "10:01:39" LastTimeusecs = "492952"
Duration = "0.624890" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5fb4" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "39" SrcTCPBytes = "40" SrcTCPRetrans = "0" SrcTCPWin = "31607" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "39" DstTCPBytes = "40" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "4" DstCount = "2" SrcBytes = "268" DstBytes = "148" SrcAppBytes = "40" DstAppBytes = "40" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "127648" StdDev = "3540" MaxUsec = "131171" MinUsec = "124126" />
<SrcIdle n = "2" MeanUsec = "372277" StdDev = "2684" MaxUsec = "374961" MinUsec = "369593" />
<DstIdle n = "2" MeanUsec = "540027" StdDev = "41982" MaxUsec = "582009" MinUsec = "498045" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20311" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:39" StartTimeusecs = "346069"
LastDate = "2001-12-18" LastTime = "10:01:39" LastTimeusecs = "346069"
Duration = "0.000000" TransRefNum = "11">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "1:0:5e:7f:ff:fe" />
<Flow> <IP SrcIPAddr = "192.168.0.16" DstIPAddr = "239.255.255.254" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "ptah.newyork.qosient.com" DstName = "239.255.255.254" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20312" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:40" StartTimeusecs = "980419"
LastDate = "2001-12-18" LastTime = "10:01:40" LastTimeusecs = "980419"
Duration = "0.000000" TransRefNum = "7108">
<MACAddrs SrcAddr = "0:2:2d:4:9f:56" DstAddr = "1:0:5e:7f:ff:fa" />
<Flow> <IP SrcIPAddr = "192.168.0.161" DstIPAddr = "239.255.255.250" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "set.newyork.qosient.com" DstName = "239.255.255.250" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20313" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:42" StartTimeusecs = "42669"
LastDate = "2001-12-18" LastTime = "10:01:43" LastTimeusecs = "300118"
Duration = "1.257449" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5fb8" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "39" SrcTCPBytes = "40" SrcTCPRetrans = "0" SrcTCPWin = "31567" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "39" DstTCPBytes = "40" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "4" DstCount = "2" SrcBytes = "268" DstBytes = "148" SrcAppBytes = "40" DstAppBytes = "40" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "170640" StdDev = "16440" MaxUsec = "187080" MinUsec = "154200" />
<SrcIdle n = "2" MeanUsec = "1732943" StdDev = "816774" MaxUsec = "2549717" MinUsec = "916169" />
<DstIdle n = "2" MeanUsec = "1875042" StdDev = "807054" MaxUsec = "2682096" MinUsec = "1067988" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20314" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:44" StartTimeusecs = "641910"
LastDate = "2001-12-18" LastTime = "10:01:44" LastTimeusecs = "641910"
Duration = "0.000000" TransRefNum = "12">
<MACAddrs SrcAddr = "0:b0:d0:76:3b:73" DstAddr = "1:0:5e:0:1:1" />
<Flow> <IP SrcIPAddr = "192.168.0.132" DstIPAddr = "224.0.1.1" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "anubis.newyork.qosient.com" DstName = "ntp.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "46" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20315" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:44" StartTimeusecs = "631660"
LastDate = "2001-12-18" LastTime = "10:01:46" LastTimeusecs = "522062"
Duration = "1.890402" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "5fc6" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "199" SrcTCPBytes = "200" SrcTCPRetrans = "0" SrcTCPWin = "31387" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "179" DstTCPBytes = "200" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "14" DstCount = "11" SrcBytes = "980" DstBytes = "794" SrcAppBytes = "200" DstAppBytes = "200" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "144892" StdDev = "21705" MaxUsec = "173387" MinUsec = "112644" />
<SrcIdle n = "10" MeanUsec = "263453" StdDev = "405957" MaxUsec = "1331542" MinUsec = "5309" />
<DstIdle n = "10" MeanUsec = "188020" StdDev = "237362" MaxUsec = "860072" MinUsec = "453" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20316" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:46" StartTimeusecs = "703425"
LastDate = "2001-12-18" LastTime = "10:01:47" LastTimeusecs = "805016"
Duration = "1.101591" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6017" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "79" SrcTCPBytes = "80" SrcTCPRetrans = "0" SrcTCPWin = "32707" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "139" DstTCPBytes = "120" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "5" SrcBytes = "536" DstBytes = "390" SrcAppBytes = "80" DstAppBytes = "120" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "151365" StdDev = "29443" MaxUsec = "189200" MinUsec = "108879" />
<SrcIdle n = "4" MeanUsec = "171332" StdDev = "76963" MaxUsec = "257360" MinUsec = "77878" />
<DstIdle n = "4" MeanUsec = "185150" StdDev = "149066" MaxUsec = "359953" MinUsec = "506" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20317" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:47" StartTimeusecs = "248677"
LastDate = "2001-12-18" LastTime = "10:01:47" LastTimeusecs = "404428"
Duration = "0.155751" TransRefNum = "7071">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:c0:4f:7b:e0:87" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.16" Proto = "tcp" Sport = "1525" Dport = "1291" IpId = "5fe6" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST" TCPOptions = "MAX|SACKOK" SynAckuSecs = "90" AckDatauSecs = "85" >
<TCPExtMetrics SrcTCPSeqBase = "2181598035" SrcTCPAckBytes = "831" SrcTCPBytes = "832" SrcTCPRetrans = "0" SrcTCPWin = "32319" SrcTCPFlags = "PA"
DstTCPSeqBase = "3330826188" DstTCPAckBytes = "607" DstTCPBytes = "608" DstTCPRetrans = "0" DstTCPWin = "16512" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "1108" DstBytes = "824" SrcAppBytes = "832" DstAppBytes = "608" />
<ArgusTimeStats>
<SrcIdle n = "3" MeanUsec = "6451" StdDev = "3980" MaxUsec = "12060" MinUsec = "3233" />
<DstIdle n = "3" MeanUsec = "5881" StdDev = "5200" MaxUsec = "13235" MinUsec = "2107" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20318" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:47" StartTimeusecs = "258033"
LastDate = "2001-12-18" LastTime = "10:01:47" LastTimeusecs = "844438"
Duration = "0.586405" TransRefNum = "7212">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "216.92.197.167" Proto = "tcp" Sport = "1629" Dport = "110" IpId = "6014" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "47" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "44017" AckDatauSecs = "114" >
<TCPExtMetrics SrcTCPSeqBase = "2367047435" SrcTCPAckBytes = "44" SrcTCPBytes = "44" SrcTCPRetrans = "0" SrcTCPWin = "32730" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "4225216566" DstTCPAckBytes = "37" DstTCPBytes = "37" DstTCPRetrans = "0" DstTCPWin = "16800" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "10" SrcBytes = "616" DstBytes = "603" SrcAppBytes = "44" DstAppBytes = "37" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "90132" StdDev = "101242" MaxUsec = "231781" MinUsec = "1231" />
<SrcIdle n = "5" MeanUsec = "41971" StdDev = "2164" MaxUsec = "45065" MinUsec = "38923" />
<DstActive n = "2" MeanUsec = "31828" StdDev = "30292" MaxUsec = "62120" MinUsec = "1536" />
<DstIdle n = "7" MeanUsec = "68390" StdDev = "65449" MaxUsec = "228690" MinUsec = "40053" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20319" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:47" StartTimeusecs = "275840"
LastDate = "2001-12-18" LastTime = "10:01:48" LastTimeusecs = "160130"
Duration = "0.884290" TransRefNum = "7213">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "206.46.170.10" Proto = "tcp" Sport = "1631" Dport = "110" IpId = "6023" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "mta1pub.gte.net" />
<FlowAttrs SrcTTL = "128" DstTTL = "39" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "82825" AckDatauSecs = "100" >
<TCPExtMetrics SrcTCPSeqBase = "2367212714" SrcTCPAckBytes = "46" SrcTCPBytes = "46" SrcTCPRetrans = "0" SrcTCPWin = "32596" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "1507584922" DstTCPAckBytes = "171" DstTCPBytes = "171" DstTCPRetrans = "0" DstTCPWin = "25200" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "11" SrcBytes = "618" DstBytes = "794" SrcAppBytes = "46" DstAppBytes = "171" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "98262" StdDev = "84680" MaxUsec = "208388" MinUsec = "2453" />
<SrcIdle n = "5" MeanUsec = "83519" StdDev = "4053" MaxUsec = "90803" MinUsec = "79580" />
<DstActive n = "3" MeanUsec = "56168" StdDev = "38092" MaxUsec = "89083" MinUsec = "2778" />
<DstIdle n = "7" MeanUsec = "90423" StdDev = "51879" MaxUsec = "196135" MinUsec = "3499" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20320" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:53" StartTimeusecs = "270425"
LastDate = "2001-12-18" LastTime = "10:01:53" LastTimeusecs = "429765"
Duration = "0.159340" TransRefNum = "7214">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.57" Proto = "tcp" Sport = "1632" Dport = "80" IpId = "602d" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "26921" AckDatauSecs = "121" >
<TCPExtMetrics SrcTCPSeqBase = "2368757660" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32234" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3690652278" DstTCPAckBytes = "533" DstTCPBytes = "533" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "767" SrcAppBytes = "294" DstAppBytes = "533" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "63258" StdDev = "14617" MaxUsec = "77875" MinUsec = "48641" />
<DstActive n = "2" MeanUsec = "25736" StdDev = "23420" MaxUsec = "49156" MinUsec = "2317" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20321" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:53" StartTimeusecs = "272547"
LastDate = "2001-12-18" LastTime = "10:01:53" LastTimeusecs = "460665"
Duration = "0.188118" TransRefNum = "7215">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.57" Proto = "tcp" Sport = "1633" Dport = "80" IpId = "6031" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "33082" AckDatauSecs = "102" >
<TCPExtMetrics SrcTCPSeqBase = "2368800850" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32254" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3438343125" DstTCPAckBytes = "513" DstTCPBytes = "513" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "747" SrcAppBytes = "294" DstAppBytes = "513" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "74599" StdDev = "42978" MaxUsec = "117577" MinUsec = "31622" />
<DstActive n = "2" MeanUsec = "17235" StdDev = "14875" MaxUsec = "32110" MinUsec = "2361" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20322" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:53" StartTimeusecs = "382385"
LastDate = "2001-12-18" LastTime = "10:01:53" LastTimeusecs = "615467"
Duration = "0.233082" TransRefNum = "7216">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.57" Proto = "tcp" Sport = "1634" Dport = "80" IpId = "6035" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "48521" AckDatauSecs = "85" >
<TCPExtMetrics SrcTCPSeqBase = "2368876300" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "2297964847" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "90473" StdDev = "18357" MaxUsec = "108829" MinUsec = "72118" />
<DstActive n = "2" MeanUsec = "38434" StdDev = "36052" MaxUsec = "74486" MinUsec = "2382" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20323" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:01:53" StartTimeusecs = "430621"
LastDate = "2001-12-18" LastTime = "10:01:53" LastTimeusecs = "658921"
Duration = "0.228300" TransRefNum = "7217">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.57" Proto = "tcp" Sport = "1635" Dport = "80" IpId = "6037" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "56708" AckDatauSecs = "68" >
<TCPExtMetrics SrcTCPSeqBase = "2368934436" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3503467486" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "83991" StdDev = "49753" MaxUsec = "133744" MinUsec = "34238" />
<DstActive n = "2" MeanUsec = "20795" StdDev = "18464" MaxUsec = "39259" MinUsec = "2331" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20324" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:01" StartTimeusecs = "545121"
LastDate = "2001-12-18" LastTime = "10:02:01" LastTimeusecs = "777023"
Duration = "0.231902" TransRefNum = "63">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "205.188.10.47" Proto = "tcp" Sport = "1866" Dport = "5190" IpId = "6038" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "205.188.10.47" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2624202979" SrcTCPAckBytes = "5" SrcTCPBytes = "6" SrcTCPRetrans = "0" SrcTCPWin = "31942" SrcTCPFlags = "PA"
DstTCPSeqBase = "3205297455" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "A" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "6" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20325" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:04" StartTimeusecs = "138003"
LastDate = "2001-12-18" LastTime = "10:02:06" LastTimeusecs = "31571"
Duration = "1.893568" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6044" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "179" SrcTCPBytes = "180" SrcTCPRetrans = "0" SrcTCPWin = "32527" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "179" DstTCPBytes = "180" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "12" DstCount = "9" SrcBytes = "846" DstBytes = "666" SrcAppBytes = "180" DstAppBytes = "180" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "173785" StdDev = "43719" MaxUsec = "206041" MinUsec = "111976" />
<SrcIdle n = "8" MeanUsec = "171526" StdDev = "212001" MaxUsec = "695269" MinUsec = "14118" />
<DstIdle n = "8" MeanUsec = "211251" StdDev = "265992" MaxUsec = "810103" MinUsec = "9905" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20326" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:04" StartTimeusecs = "395761"
LastDate = "2001-12-18" LastTime = "10:02:04" LastTimeusecs = "395761"
Duration = "0.000000" TransRefNum = "7218">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20327" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:06" StartTimeusecs = "787346"
LastDate = "2001-12-18" LastTime = "10:02:08" LastTimeusecs = "735509"
Duration = "1.948163" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6058" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "259" SrcTCPBytes = "260" SrcTCPRetrans = "0" SrcTCPWin = "32267" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "259" DstTCPBytes = "260" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "20" DstCount = "13" SrcBytes = "1382" DstBytes = "962" SrcAppBytes = "260" DstAppBytes = "260" />
<ArgusTimeStats>
<SrcActive n = "7" MeanUsec = "127047" StdDev = "10998" MaxUsec = "145539" MinUsec = "106690" />
<SrcIdle n = "13" MeanUsec = "139585" StdDev = "184965" MaxUsec = "755775" MinUsec = "7872" />
<DstIdle n = "13" MeanUsec = "214627" StdDev = "216582" MaxUsec = "960156" MinUsec = "109878" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20328" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:10" StartTimeusecs = "467901"
LastDate = "2001-12-18" LastTime = "10:02:12" LastTimeusecs = "452700"
Duration = "1.984799" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6060" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "99" SrcTCPBytes = "100" SrcTCPRetrans = "0" SrcTCPWin = "32187" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "79" DstTCPBytes = "100" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "5" SrcBytes = "550" DstBytes = "370" SrcAppBytes = "100" DstAppBytes = "100" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "143793" StdDev = "19223" MaxUsec = "170376" MinUsec = "125585" />
<SrcIdle n = "5" MeanUsec = "656961" StdDev = "642292" MaxUsec = "1732392" MinUsec = "132464" />
<DstIdle n = "5" MeanUsec = "766006" StdDev = "667458" MaxUsec = "1849995" MinUsec = "140567" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20329" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:12" StartTimeusecs = "573543"
LastDate = "2001-12-18" LastTime = "10:02:14" LastTimeusecs = "443821"
Duration = "1.870278" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6072" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "219" SrcTCPBytes = "220" SrcTCPRetrans = "0" SrcTCPWin = "31947" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "239" DstTCPBytes = "220" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "18" DstCount = "11" SrcBytes = "1234" DstBytes = "814" SrcAppBytes = "220" DstAppBytes = "220" />
<ArgusTimeStats>
<SrcActive n = "7" MeanUsec = "141043" StdDev = "21938" MaxUsec = "169435" MinUsec = "112090" />
<SrcIdle n = "11" MeanUsec = "91347" StdDev = "45810" MaxUsec = "163749" MinUsec = "20499" />
<DstIdle n = "11" MeanUsec = "167276" StdDev = "51495" MaxUsec = "258186" MinUsec = "78138" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20330" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:14" StartTimeusecs = "584778"
LastDate = "2001-12-18" LastTime = "10:02:16" LastTimeusecs = "446733"
Duration = "1.861955" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6079" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "79" SrcTCPBytes = "80" SrcTCPRetrans = "0" SrcTCPWin = "31867" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "79" DstTCPBytes = "80" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "7" DstCount = "4" SrcBytes = "476" DstBytes = "296" SrcAppBytes = "80" DstAppBytes = "80" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "154290" StdDev = "33226" MaxUsec = "192138" MinUsec = "111256" />
<SrcIdle n = "4" MeanUsec = "385010" StdDev = "477985" MaxUsec = "1209899" MinUsec = "43635" />
<DstIdle n = "4" MeanUsec = "492534" StdDev = "480767" MaxUsec = "1319976" MinUsec = "150154" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20331" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:16" StartTimeusecs = "688381"
LastDate = "2001-12-18" LastTime = "10:02:18" LastTimeusecs = "649944"
Duration = "1.961563" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6089" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "179" SrcTCPBytes = "180" SrcTCPRetrans = "0" SrcTCPWin = "31687" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "179" DstTCPBytes = "180" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "16" DstCount = "10" SrcBytes = "1086" DstBytes = "720" SrcAppBytes = "180" DstAppBytes = "180" />
<ArgusTimeStats>
<SrcActive n = "7" MeanUsec = "158569" StdDev = "23782" MaxUsec = "193031" MinUsec = "110530" />
<SrcIdle n = "9" MeanUsec = "121469" StdDev = "103660" MaxUsec = "354795" MinUsec = "21955" />
<DstIdle n = "9" MeanUsec = "195578" StdDev = "116710" MaxUsec = "429920" MinUsec = "2181" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20332" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:18" StartTimeusecs = "905367"
LastDate = "2001-12-18" LastTime = "10:02:20" LastTimeusecs = "853155"
Duration = "1.947788" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6094" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "119" SrcTCPBytes = "120" SrcTCPRetrans = "0" SrcTCPWin = "31567" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "119" DstTCPBytes = "120" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "11" DstCount = "6" SrcBytes = "744" DstBytes = "444" SrcAppBytes = "120" DstAppBytes = "120" />
<ArgusTimeStats>
<SrcActive n = "5" MeanUsec = "142463" StdDev = "21291" MaxUsec = "176124" MinUsec = "114393" />
<SrcIdle n = "6" MeanUsec = "248482" StdDev = "333694" MaxUsec = "975587" MinUsec = "24169" />
<DstIdle n = "6" MeanUsec = "356665" StdDev = "351891" MaxUsec = "1121900" MinUsec = "119989" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20333" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:21" StartTimeusecs = "58036"
LastDate = "2001-12-18" LastTime = "10:02:22" LastTimeusecs = "255202"
Duration = "1.197166" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6098" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "39" SrcTCPBytes = "40" SrcTCPRetrans = "0" SrcTCPWin = "31495" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "71" DstTCPBytes = "72" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "4" DstCount = "3" SrcBytes = "268" DstBytes = "234" SrcAppBytes = "40" DstAppBytes = "72" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "189438" StdDev = "6268" MaxUsec = "195706" MinUsec = "183170" />
<SrcIdle n = "2" MeanUsec = "511585" StdDev = "306705" MaxUsec = "818290" MinUsec = "204881" />
<DstIdle n = "2" MeanUsec = "200273" StdDev = "179744" MaxUsec = "380017" MinUsec = "20529" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20334" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:24" StartTimeusecs = "78584"
LastDate = "2001-12-18" LastTime = "10:02:26" LastTimeusecs = "60734"
Duration = "1.982150" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "60ac" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "279" SrcTCPBytes = "280" SrcTCPRetrans = "0" SrcTCPWin = "32667" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "295" DstTCPBytes = "296" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "20" DstCount = "14" SrcBytes = "1396" DstBytes = "1052" SrcAppBytes = "280" DstAppBytes = "296" />
<ArgusTimeStats>
<SrcActive n = "6" MeanUsec = "160946" StdDev = "28801" MaxUsec = "195674" MinUsec = "109514" />
<SrcIdle n = "14" MeanUsec = "202846" StdDev = "452231" MaxUsec = "1823382" MinUsec = "1845" />
<DstIdle n = "14" MeanUsec = "270699" StdDev = "479739" MaxUsec = "1979813" MinUsec = "49995" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20335" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:26" StartTimeusecs = "184934"
LastDate = "2001-12-18" LastTime = "10:02:26" LastTimeusecs = "185750"
Duration = "0.000816" TransRefNum = "33">
<Flow> <Arp SrcArpAddr = "192.168.0.160" TargetArpAaddr = "192.168.0.1" ArpMacAddr = "0:60:1d:20:ed:74" /> </Flow>
<IPAddrNames SrcName = "192.168.0.160" TargetName = "router.newyork.qosient.com" />
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "18" DstAppBytes = "18" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20336" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:26" StartTimeusecs = "130702"
LastDate = "2001-12-18" LastTime = "10:02:26" LastTimeusecs = "525475"
Duration = "0.394773" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "60cc" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "59" SrcTCPBytes = "60" SrcTCPRetrans = "0" SrcTCPWin = "32703" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "2959" DstTCPBytes = "2960" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "32" DstCount = "61" SrcBytes = "1962" DstBytes = "6254" SrcAppBytes = "60" DstAppBytes = "2960" />
<ArgusTimeStats>
<SrcActive n = "29" MeanUsec = "5960" StdDev = "8693" MaxUsec = "39436" MinUsec = "760" />
<SrcIdle n = "3" MeanUsec = "97297" StdDev = "23532" MaxUsec = "127403" MinUsec = "69968" />
<DstActive n = "30" MeanUsec = "7632" StdDev = "23664" MaxUsec = "129846" MinUsec = "322" />
<DstIdle n = "31" MeanUsec = "13008" StdDev = "45009" MaxUsec = "239989" MinUsec = "366" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20337" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:34" StartTimeusecs = "395563"
LastDate = "2001-12-18" LastTime = "10:02:34" LastTimeusecs = "395563"
Duration = "0.000000" TransRefNum = "7219">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20338" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:34" StartTimeusecs = "905546"
LastDate = "2001-12-18" LastTime = "10:02:35" LastTimeusecs = "274153"
Duration = "0.368607" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "60d1" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "59" SrcTCPBytes = "60" SrcTCPRetrans = "0" SrcTCPWin = "32643" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "59" DstTCPBytes = "60" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "3" SrcBytes = "342" DstBytes = "222" SrcAppBytes = "60" DstAppBytes = "60" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "150953" StdDev = "20055" MaxUsec = "171005" MinUsec = "130902" />
<SrcIdle n = "2" MeanUsec = "33350" StdDev = "4071" MaxUsec = "37421" MinUsec = "29279" />
<DstIdle n = "2" MeanUsec = "100052" StdDev = "59911" MaxUsec = "159963" MinUsec = "40141" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20339" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:39" StartTimeusecs = "525863"
LastDate = "2001-12-18" LastTime = "10:02:41" LastTimeusecs = "273486"
Duration = "1.747623" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "60d7" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "59" SrcTCPBytes = "60" SrcTCPRetrans = "0" SrcTCPWin = "32535" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "107" DstTCPBytes = "108" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "6" SrcBytes = "402" DstBytes = "432" SrcAppBytes = "60" DstAppBytes = "108" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "68367" StdDev = "68368" MaxUsec = "164657" MinUsec = "12639" />
<SrcIdle n = "2" MeanUsec = "771260" StdDev = "693169" MaxUsec = "1464429" MinUsec = "78091" />
<DstActive n = "2" MeanUsec = "9030" StdDev = "1001" MaxUsec = "10027" MinUsec = "8034" />
<DstIdle n = "3" MeanUsec = "570690" StdDev = "643201" MaxUsec = "1469913" MinUsec = "2288" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20340" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:42" StartTimeusecs = "19336"
LastDate = "2001-12-18" LastTime = "10:02:43" LastTimeusecs = "886712"
Duration = "1.867376" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "60e9" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "239" SrcTCPBytes = "240" SrcTCPRetrans = "0" SrcTCPWin = "32295" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "239" DstTCPBytes = "240" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "18" DstCount = "12" SrcBytes = "1248" DstBytes = "888" SrcAppBytes = "240" DstAppBytes = "240" />
<ArgusTimeStats>
<SrcActive n = "6" MeanUsec = "134595" StdDev = "14639" MaxUsec = "159979" MinUsec = "115873" />
<SrcIdle n = "12" MeanUsec = "150471" StdDev = "186899" MaxUsec = "745850" MinUsec = "29430" />
<DstIdle n = "12" MeanUsec = "208360" StdDev = "190392" MaxUsec = "750112" MinUsec = "31321" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20341" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:44" StartTimeusecs = "767012"
LastDate = "2001-12-18" LastTime = "10:02:45" LastTimeusecs = "791103"
Duration = "1.024091" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "60f4" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "159" SrcTCPBytes = "160" SrcTCPRetrans = "0" SrcTCPWin = "32135" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "159" DstTCPBytes = "160" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "11" DstCount = "8" SrcBytes = "772" DstBytes = "592" SrcAppBytes = "160" DstAppBytes = "160" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "160960" StdDev = "37056" MaxUsec = "193268" MinUsec = "109075" />
<SrcIdle n = "8" MeanUsec = "177688" StdDev = "267861" MaxUsec = "880300" MinUsec = "11045" />
<DstIdle n = "8" MeanUsec = "229985" StdDev = "303512" MaxUsec = "999837" MinUsec = "9923" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20342" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:47" StartTimeusecs = "297497"
LastDate = "2001-12-18" LastTime = "10:02:47" LastTimeusecs = "297497"
Duration = "0.000000" TransRefNum = "7220">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "216.92.197.167" Proto = "tcp" Sport = "1637" Dport = "110" IpId = "60fb" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2382530293" SrcTCPAckBytes = "0" SrcTCPBytes = "0" SrcTCPRetrans = "0" SrcTCPWin = "0" SrcTCPFlags = "S"
DstTCPSeqBase = "0" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "0" DstTCPFlags = "" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "62" DstBytes = "0" SrcAppBytes = "0" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20343" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:47" StartTimeusecs = "288141"
LastDate = "2001-12-18" LastTime = "10:02:47" LastTimeusecs = "491920"
Duration = "0.203779" TransRefNum = "7071">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:c0:4f:7b:e0:87" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.16" Proto = "tcp" Sport = "1525" Dport = "1291" IpId = "6109" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST" TCPOptions = "MAX|SACKOK" SynAckuSecs = "90" AckDatauSecs = "85" >
<TCPExtMetrics SrcTCPSeqBase = "2181598035" SrcTCPAckBytes = "831" SrcTCPBytes = "832" SrcTCPRetrans = "0" SrcTCPWin = "31711" SrcTCPFlags = "PA"
DstTCPSeqBase = "3330826188" DstTCPAckBytes = "607" DstTCPBytes = "608" DstTCPRetrans = "0" DstTCPWin = "17344" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "1108" DstBytes = "824" SrcAppBytes = "832" DstAppBytes = "608" />
<ArgusTimeStats>
<SrcIdle n = "3" MeanUsec = "5121" StdDev = "1211" MaxUsec = "6702" MinUsec = "3763" />
<DstIdle n = "3" MeanUsec = "4554" StdDev = "2439" MaxUsec = "7965" MinUsec = "2412" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20344" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:47" StartTimeusecs = "689496"
LastDate = "2001-12-18" LastTime = "10:02:47" LastTimeusecs = "892531"
Duration = "0.203035" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "611c" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "19" SrcTCPBytes = "20" SrcTCPRetrans = "0" SrcTCPWin = "32115" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "19" DstTCPBytes = "20" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "2" DstCount = "1" SrcBytes = "134" DstBytes = "74" SrcAppBytes = "20" DstAppBytes = "20" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20345" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:47" StartTimeusecs = "311308"
LastDate = "2001-12-18" LastTime = "10:02:48" LastTimeusecs = "251641"
Duration = "0.940333" TransRefNum = "7221">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "206.46.170.10" Proto = "tcp" Sport = "1639" Dport = "110" IpId = "6129" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "mta1pub.gte.net" />
<FlowAttrs SrcTTL = "128" DstTTL = "39" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK|SACK" SynAckuSecs = "89176" AckDatauSecs = "123" >
<TCPExtMetrics SrcTCPSeqBase = "2382684712" SrcTCPAckBytes = "46" SrcTCPBytes = "46" SrcTCPRetrans = "0" SrcTCPWin = "32596" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3672606858" DstTCPAckBytes = "171" DstTCPBytes = "171" DstTCPRetrans = "0" DstTCPWin = "25200" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "11" DstCount = "11" SrcBytes = "690" DstBytes = "794" SrcAppBytes = "46" DstAppBytes = "171" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "82324" StdDev = "114487" MaxUsec = "244230" MinUsec = "341" />
<SrcIdle n = "6" MeanUsec = "84791" StdDev = "8059" MaxUsec = "99000" MinUsec = "76584" />
<DstActive n = "3" MeanUsec = "85548" StdDev = "7350" MaxUsec = "95740" MinUsec = "78705" />
<DstIdle n = "7" MeanUsec = "84930" StdDev = "74854" MaxUsec = "243858" MinUsec = "2093" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20346" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:50" StartTimeusecs = "773736"
LastDate = "2001-12-18" LastTime = "10:02:52" LastTimeusecs = "763684"
Duration = "1.989948" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6157" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "579" SrcTCPBytes = "580" SrcTCPRetrans = "0" SrcTCPWin = "31995" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "119" DstTCPBytes = "140" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "8" SrcBytes = "1138" DstBytes = "572" SrcAppBytes = "580" DstAppBytes = "140" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "158928" StdDev = "32075" MaxUsec = "203131" MinUsec = "128012" />
<SrcIdle n = "7" MeanUsec = "626514" StdDev = "961815" MaxUsec = "2881205" MinUsec = "10085" />
<DstIdle n = "7" MeanUsec = "684331" StdDev = "1046814" MaxUsec = "3090139" MinUsec = "236" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20347" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:50" StartTimeusecs = "296039"
LastDate = "2001-12-18" LastTime = "10:02:50" LastTimeusecs = "814083"
Duration = "0.518044" TransRefNum = "7220">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "216.92.197.167" Proto = "tcp" Sport = "1637" Dport = "110" IpId = "614e" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "47" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK|SRTN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "40594" AckDatauSecs = "125" >
<TCPExtMetrics SrcTCPSeqBase = "2382530293" SrcTCPAckBytes = "44" SrcTCPBytes = "44" SrcTCPRetrans = "1" SrcTCPWin = "32730" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "4249102404" DstTCPAckBytes = "37" DstTCPBytes = "37" DstTCPRetrans = "0" DstTCPWin = "16800" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "10" SrcBytes = "616" DstBytes = "603" SrcAppBytes = "44" DstAppBytes = "37" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "67505" StdDev = "70201" MaxUsec = "186023" MinUsec = "2385" />
<SrcIdle n = "5" MeanUsec = "42544" StdDev = "3196" MaxUsec = "47969" MinUsec = "38895" />
<DstActive n = "2" MeanUsec = "19043" StdDev = "16373" MaxUsec = "35416" MinUsec = "2670" />
<DstIdle n = "7" MeanUsec = "62766" StdDev = "49724" MaxUsec = "184459" MinUsec = "38678" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20348" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:52" StartTimeusecs = "899825"
LastDate = "2001-12-18" LastTime = "10:02:54" LastTimeusecs = "702447"
Duration = "1.802622" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6165" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "139" SrcTCPBytes = "140" SrcTCPRetrans = "0" SrcTCPWin = "31835" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "159" DstTCPBytes = "140" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "14" DstCount = "7" SrcBytes = "938" DstBytes = "518" SrcAppBytes = "140" DstAppBytes = "140" />
<ArgusTimeStats>
<SrcActive n = "7" MeanUsec = "159386" StdDev = "22812" MaxUsec = "196346" MinUsec = "126635" />
<SrcIdle n = "7" MeanUsec = "118832" StdDev = "116192" MaxUsec = "358897" MinUsec = "3935" />
<DstIdle n = "7" MeanUsec = "255725" StdDev = "125606" MaxUsec = "500016" MinUsec = "89893" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20349" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:55" StartTimeusecs = "185904"
LastDate = "2001-12-18" LastTime = "10:02:56" LastTimeusecs = "606855"
Duration = "1.420951" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "616a" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "39" SrcTCPBytes = "40" SrcTCPRetrans = "0" SrcTCPWin = "31715" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "119" DstTCPBytes = "120" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "5" SrcBytes = "328" DstBytes = "390" SrcAppBytes = "40" DstAppBytes = "120" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "112546" StdDev = "63613" MaxUsec = "187904" MinUsec = "32313" />
<SrcIdle n = "2" MeanUsec = "783385" StdDev = "299928" MaxUsec = "1083313" MinUsec = "483457" />
<DstActive n = "2" MeanUsec = "611358" StdDev = "598502" MaxUsec = "1209860" MinUsec = "12857" />
<DstIdle n = "3" MeanUsec = "215797" StdDev = "299959" MaxUsec = "640001" MinUsec = "2316" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20350" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:02:59" StartTimeusecs = "549595"
LastDate = "2001-12-18" LastTime = "10:02:59" LastTimeusecs = "785579"
Duration = "0.235984" TransRefNum = "63">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "205.188.10.47" Proto = "tcp" Sport = "1866" Dport = "5190" IpId = "616b" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "205.188.10.47" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2624202979" SrcTCPAckBytes = "5" SrcTCPBytes = "6" SrcTCPRetrans = "0" SrcTCPWin = "31942" SrcTCPFlags = "PA"
DstTCPSeqBase = "3205297455" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "A" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "6" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20351" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:02" StartTimeusecs = "156841"
LastDate = "2001-12-18" LastTime = "10:03:02" LastTimeusecs = "318979"
Duration = "0.162138" TransRefNum = "7222">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.185" Proto = "tcp" Sport = "1640" Dport = "80" IpId = "6175" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "36415" AckDatauSecs = "127" >
<TCPExtMetrics SrcTCPSeqBase = "2386445734" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32254" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "1965346323" DstTCPAckBytes = "513" DstTCPBytes = "513" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "747" SrcAppBytes = "294" DstAppBytes = "513" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "59873" StdDev = "12400" MaxUsec = "72273" MinUsec = "47473" />
<DstActive n = "2" MeanUsec = "25172" StdDev = "22814" MaxUsec = "47986" MinUsec = "2359" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20352" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:02" StartTimeusecs = "158967"
LastDate = "2001-12-18" LastTime = "10:03:02" LastTimeusecs = "349731"
Duration = "0.190764" TransRefNum = "7223">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.185" Proto = "tcp" Sport = "1641" Dport = "80" IpId = "6179" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "40632" AckDatauSecs = "122" >
<TCPExtMetrics SrcTCPSeqBase = "2386484083" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32254" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "1740807201" DstTCPAckBytes = "513" DstTCPBytes = "513" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "747" SrcAppBytes = "294" DstAppBytes = "513" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "72097" StdDev = "40176" MaxUsec = "112273" MinUsec = "31922" />
<DstActive n = "2" MeanUsec = "17399" StdDev = "15056" MaxUsec = "32455" MinUsec = "2343" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20353" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:02" StartTimeusecs = "272749"
LastDate = "2001-12-18" LastTime = "10:03:02" LastTimeusecs = "525520"
Duration = "0.252771" TransRefNum = "7224">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.185" Proto = "tcp" Sport = "1642" Dport = "80" IpId = "617e" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "48398" AckDatauSecs = "81" >
<TCPExtMetrics SrcTCPSeqBase = "2386542380" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "1122713847" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "87720" StdDev = "20256" MaxUsec = "107975" MinUsec = "67466" />
<DstActive n = "2" MeanUsec = "49301" StdDev = "21706" MaxUsec = "71007" MinUsec = "27596" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20354" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:02" StartTimeusecs = "319498"
LastDate = "2001-12-18" LastTime = "10:03:02" LastTimeusecs = "527547"
Duration = "0.208049" TransRefNum = "7225">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.185" Proto = "tcp" Sport = "1643" Dport = "80" IpId = "617f" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "47885" AckDatauSecs = "78" >
<TCPExtMetrics SrcTCPSeqBase = "2386627058" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "105721969" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "78861" StdDev = "44625" MaxUsec = "123486" MinUsec = "34237" />
<DstActive n = "2" MeanUsec = "19937" StdDev = "18834" MaxUsec = "38771" MinUsec = "1104" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20355" Cause = "Stop"
StartDate = "2001-12-18" StartTime = "10:03:05" StartTimeusecs = "738598"
LastDate = "2001-12-18" LastTime = "10:03:05" LastTimeusecs = "739972"
Duration = "0.001374" TransRefNum = "19">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.1" Proto = "udp" Sport = "137" Dport = "137" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "router.newyork.qosient.com" />
<FlowAttrs Status = "ICMP_MAPPED" SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "110" DstBytes = "0" SrcAppBytes = "68" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20356" Cause = "Stop"
StartDate = "2001-12-18" StartTime = "10:03:07" StartTimeusecs = "240740"
LastDate = "2001-12-18" LastTime = "10:03:07" LastTimeusecs = "242098"
Duration = "0.001358" TransRefNum = "19">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.1" Proto = "udp" Sport = "137" Dport = "137" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "router.newyork.qosient.com" />
<FlowAttrs Status = "ICMP_MAPPED" SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "110" DstBytes = "0" SrcAppBytes = "68" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20357" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:04" StartTimeusecs = "395401"
LastDate = "2001-12-18" LastTime = "10:03:04" LastTimeusecs = "395401"
Duration = "0.000000" TransRefNum = "7226">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20358" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:05" StartTimeusecs = "739972"
LastDate = "2001-12-18" LastTime = "10:03:07" LastTimeusecs = "242098"
Duration = "1.502126" TransRefNum = "20">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "0:1:3:1d:93:a" />
<Flow> <ICMP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.64" Proto = "icmp" IcmpType = "UR" IcmpCode = "Port" IcmpData = "137"/> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "sphynx.newyork.qosient.com" />
<FlowAttrs SrcTTL = "254" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "2" DstCount = "0" SrcBytes = "140" DstBytes = "0" SrcAppBytes = "72" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20359" Cause = "Stop"
StartDate = "2001-12-18" StartTime = "10:03:08" StartTimeusecs = "742914"
LastDate = "2001-12-18" LastTime = "10:03:08" LastTimeusecs = "744300"
Duration = "0.001386" TransRefNum = "19">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.1" Proto = "udp" Sport = "137" Dport = "137" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "router.newyork.qosient.com" />
<FlowAttrs Status = "ICMP_MAPPED" SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "110" DstBytes = "0" SrcAppBytes = "68" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20360" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:08" StartTimeusecs = "744300"
LastDate = "2001-12-18" LastTime = "10:03:08" LastTimeusecs = "744300"
Duration = "0.000000" TransRefNum = "20">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "0:1:3:1d:93:a" />
<Flow> <ICMP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.64" Proto = "icmp" IcmpType = "UR" IcmpCode = "Port" IcmpData = "137"/> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "sphynx.newyork.qosient.com" />
<FlowAttrs SrcTTL = "254" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "70" DstBytes = "0" SrcAppBytes = "36" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20361" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:09" StartTimeusecs = "771703"
LastDate = "2001-12-18" LastTime = "10:03:10" LastTimeusecs = "926070"
Duration = "1.154367" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6188" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "59" SrcTCPBytes = "60" SrcTCPRetrans = "0" SrcTCPWin = "31635" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "79" DstTCPBytes = "80" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "4" SrcBytes = "402" DstBytes = "296" SrcAppBytes = "60" DstAppBytes = "80" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "108908" StdDev = "68852" MaxUsec = "162135" MinUsec = "11683" />
<SrcIdle n = "2" MeanUsec = "413821" StdDev = "235758" MaxUsec = "649579" MinUsec = "178063" />
<DstIdle n = "2" MeanUsec = "495090" StdDev = "164953" MaxUsec = "660042" MinUsec = "330139" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20362" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:24" StartTimeusecs = "298439"
LastDate = "2001-12-18" LastTime = "10:03:24" LastTimeusecs = "298439"
Duration = "0.000000" TransRefNum = "7227">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "1:0:5e:0:1:18" />
<Flow> <IP SrcIPAddr = "192.168.0.16" DstIPAddr = "224.0.1.24" Proto = "udp" Sport = "42" Dport = "42" /> </Flow>
<IPAddrNames SrcName = "ptah.newyork.qosient.com" DstName = "microsoft-ds.mcast.net" />
<FlowAttrs SrcTTL = "2" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "61" DstBytes = "0" SrcAppBytes = "19" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20363" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:29" StartTimeusecs = "23225"
LastDate = "2001-12-18" LastTime = "10:03:30" LastTimeusecs = "454509"
Duration = "1.431284" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6197" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "819" SrcTCPBytes = "820" SrcTCPRetrans = "0" SrcTCPWin = "31447" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "187" DstTCPBytes = "188" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "8" SrcBytes = "1270" DstBytes = "620" SrcAppBytes = "820" DstAppBytes = "188" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "145948" StdDev = "79752" MaxUsec = "206014" MinUsec = "33243" />
<SrcIdle n = "4" MeanUsec = "248359" StdDev = "416607" MaxUsec = "969911" MinUsec = "1495" />
<DstActive n = "2" MeanUsec = "593669" StdDev = "586164" MaxUsec = "1179833" MinUsec = "7505" />
<DstIdle n = "5" MeanUsec = "10551" StdDev = "1479" MaxUsec = "12185" MinUsec = "8135" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20364" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:28" StartTimeusecs = "754075"
LastDate = "2001-12-18" LastTime = "10:03:28" LastTimeusecs = "952320"
Duration = "0.198245" TransRefNum = "7228">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:c0:4f:7b:e0:87" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.16" Proto = "tcp" Sport = "2204" Dport = "445" IpId = "618f" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "3243724032" SrcTCPAckBytes = "3043" SrcTCPBytes = "1862" SrcTCPRetrans = "0" SrcTCPWin = "32371" SrcTCPFlags = "PA"
DstTCPSeqBase = "208987552" DstTCPAckBytes = "1116" DstTCPBytes = "1117" DstTCPRetrans = "0" DstTCPWin = "17118" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "7" DstCount = "6" SrcBytes = "3428" DstBytes = "1447" SrcAppBytes = "3044" DstAppBytes = "1117" />
<ArgusTimeStats>
<SrcIdle n = "4" MeanUsec = "2387" StdDev = "2008" MaxUsec = "5319" MinUsec = "479" />
<DstIdle n = "5" MeanUsec = "1921" StdDev = "1856" MaxUsec = "5292" MinUsec = "431" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20365" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:32" StartTimeusecs = "201839"
LastDate = "2001-12-18" LastTime = "10:03:33" LastTimeusecs = "659174"
Duration = "1.457335" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "619d" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "59" SrcTCPBytes = "60" SrcTCPRetrans = "0" SrcTCPWin = "31367" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "79" DstTCPBytes = "80" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "4" SrcBytes = "402" DstBytes = "296" SrcAppBytes = "60" DstAppBytes = "80" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "99272" StdDev = "63114" MaxUsec = "155458" MinUsec = "11117" />
<SrcIdle n = "3" MeanUsec = "968949" StdDev = "578146" MaxUsec = "1747330" MinUsec = "363032" />
<DstIdle n = "3" MeanUsec = "1086948" StdDev = "648128" MaxUsec = "1940010" MinUsec = "370039" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20366" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:34" StartTimeusecs = "405438"
LastDate = "2001-12-18" LastTime = "10:03:35" LastTimeusecs = "862380"
Duration = "1.456942" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "61a1" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "39" SrcTCPBytes = "40" SrcTCPRetrans = "0" SrcTCPWin = "31327" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "39" DstTCPBytes = "40" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "4" DstCount = "2" SrcBytes = "268" DstBytes = "148" SrcAppBytes = "40" DstAppBytes = "40" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "171091" StdDev = "16025" MaxUsec = "187116" MinUsec = "155066" />
<SrcIdle n = "2" MeanUsec = "930512" StdDev = "184248" MaxUsec = "1114760" MinUsec = "746264" />
<DstIdle n = "2" MeanUsec = "1075004" StdDev = "194970" MaxUsec = "1269972" MinUsec = "880037" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20367" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:34" StartTimeusecs = "395221"
LastDate = "2001-12-18" LastTime = "10:03:34" LastTimeusecs = "395221"
Duration = "0.000000" TransRefNum = "7229">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20368" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:36" StartTimeusecs = "520837"
LastDate = "2001-12-18" LastTime = "10:03:37" LastTimeusecs = "765156"
Duration = "1.244319" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "61a5" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "39" SrcTCPBytes = "40" SrcTCPRetrans = "0" SrcTCPWin = "32747" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "39" DstTCPBytes = "40" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "4" DstCount = "2" SrcBytes = "268" DstBytes = "148" SrcAppBytes = "40" DstAppBytes = "40" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "157974" StdDev = "15268" MaxUsec = "173238" MinUsec = "142711" />
<SrcIdle n = "2" MeanUsec = "793413" StdDev = "134959" MaxUsec = "928370" MinUsec = "658457" />
<DstIdle n = "2" MeanUsec = "955015" StdDev = "114936" MaxUsec = "1069951" MinUsec = "840079" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20369" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:39" StartTimeusecs = "649035"
LastDate = "2001-12-18" LastTime = "10:03:39" LastTimeusecs = "768066"
Duration = "0.119031" TransRefNum = "7228">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:c0:4f:7b:e0:87" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.16" Proto = "tcp" Sport = "2204" Dport = "445" IpId = "61a8" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "3243724032" SrcTCPAckBytes = "81" SrcTCPBytes = "82" SrcTCPRetrans = "0" SrcTCPWin = "32289" SrcTCPFlags = "PA"
DstTCPSeqBase = "208987552" DstTCPAckBytes = "81" DstTCPBytes = "82" DstTCPRetrans = "0" DstTCPWin = "17036" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "3" DstCount = "2" SrcBytes = "250" DstBytes = "190" SrcAppBytes = "82" DstAppBytes = "82" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20370" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:40" StartTimeusecs = "684269"
LastDate = "2001-12-18" LastTime = "10:03:41" LastTimeusecs = "971278"
Duration = "1.287009" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "61b0" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "819" SrcTCPBytes = "820" SrcTCPRetrans = "0" SrcTCPWin = "32571" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "175" DstTCPBytes = "176" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "8" SrcBytes = "1270" DstBytes = "608" SrcAppBytes = "820" DstAppBytes = "176" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "132358" StdDev = "73352" MaxUsec = "201793" MinUsec = "30895" />
<SrcIdle n = "5" MeanUsec = "761809" StdDev = "1129130" MaxUsec = "2919113" MinUsec = "416" />
<DstActive n = "3" MeanUsec = "1380756" StdDev = "1287192" MaxUsec = "3099858" MinUsec = "2735" />
<DstIdle n = "5" MeanUsec = "7593" StdDev = "4109" MaxUsec = "11860" MinUsec = "417" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20371" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:42" StartTimeusecs = "24071"
LastDate = "2001-12-18" LastTime = "10:03:42" LastTimeusecs = "24071"
Duration = "0.000000" TransRefNum = "11">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "1:0:5e:7f:ff:fe" />
<Flow> <IP SrcIPAddr = "192.168.0.16" DstIPAddr = "239.255.255.254" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "ptah.newyork.qosient.com" DstName = "239.255.255.254" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20372" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:41" StartTimeusecs = "395103"
LastDate = "2001-12-18" LastTime = "10:03:41" LastTimeusecs = "395103"
Duration = "0.000000" TransRefNum = "7">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "1:0:5e:0:0:2" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "224.0.0.2" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "all-routers.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20373" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:41" StartTimeusecs = "394222"
LastDate = "2001-12-18" LastTime = "10:03:41" LastTimeusecs = "394222"
Duration = "0.000000" TransRefNum = "5">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "1:0:5e:0:0:1" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "224.0.0.1" Proto = "igmp" Sport = "17" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "all-systems.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20374" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:41" StartTimeusecs = "394675"
LastDate = "2001-12-18" LastTime = "10:03:41" LastTimeusecs = "394675"
Duration = "0.000000" TransRefNum = "6">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "1:0:5e:0:0:c" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "224.0.0.12" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "dhcp-agents.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20375" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:42" StartTimeusecs = "162842"
LastDate = "2001-12-18" LastTime = "10:03:42" LastTimeusecs = "162842"
Duration = "0.000000" TransRefNum = "9">
<MACAddrs SrcAddr = "0:2:2d:4:9f:56" DstAddr = "1:0:5e:0:0:9" />
<Flow> <IP SrcIPAddr = "192.168.0.161" DstIPAddr = "224.0.0.9" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "set.newyork.qosient.com" DstName = "rip2-routers.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20376" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:44" StartTimeusecs = "165863"
LastDate = "2001-12-18" LastTime = "10:03:44" LastTimeusecs = "165863"
Duration = "0.000000" TransRefNum = "7108">
<MACAddrs SrcAddr = "0:2:2d:4:9f:56" DstAddr = "1:0:5e:7f:ff:fa" />
<Flow> <IP SrcIPAddr = "192.168.0.161" DstIPAddr = "239.255.255.250" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "set.newyork.qosient.com" DstName = "239.255.255.250" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20377" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:47" StartTimeusecs = "72347"
LastDate = "2001-12-18" LastTime = "10:03:47" LastTimeusecs = "233395"
Duration = "0.161048" TransRefNum = "7230">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.184.89" Proto = "tcp" Sport = "1644" Dport = "80" IpId = "61ba" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "30675" AckDatauSecs = "113" >
<TCPExtMetrics SrcTCPSeqBase = "2397816999" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32234" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3605287660" DstTCPAckBytes = "533" DstTCPBytes = "533" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "767" SrcAppBytes = "294" DstAppBytes = "533" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "62172" StdDev = "23201" MaxUsec = "85373" MinUsec = "38971" />
<DstActive n = "2" MeanUsec = "20929" StdDev = "18529" MaxUsec = "39458" MinUsec = "2401" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20378" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:47" StartTimeusecs = "74501"
LastDate = "2001-12-18" LastTime = "10:03:47" LastTimeusecs = "264952"
Duration = "0.190451" TransRefNum = "7231">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.184.89" Proto = "tcp" Sport = "1645" Dport = "80" IpId = "61be" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "38152" AckDatauSecs = "113" >
<TCPExtMetrics SrcTCPSeqBase = "2397865862" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32266" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3960083151" DstTCPAckBytes = "501" DstTCPBytes = "501" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "735" SrcAppBytes = "294" DstAppBytes = "501" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "73187" StdDev = "40869" MaxUsec = "114056" MinUsec = "32318" />
<DstActive n = "2" MeanUsec = "17607" StdDev = "15209" MaxUsec = "32816" MinUsec = "2398" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20379" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:47" StartTimeusecs = "321968"
LastDate = "2001-12-18" LastTime = "10:03:47" LastTimeusecs = "479277"
Duration = "0.157309" TransRefNum = "7071">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:c0:4f:7b:e0:87" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.16" Proto = "tcp" Sport = "1525" Dport = "1291" IpId = "61da" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST" TCPOptions = "MAX|SACKOK" SynAckuSecs = "90" AckDatauSecs = "85" >
<TCPExtMetrics SrcTCPSeqBase = "2181598035" SrcTCPAckBytes = "831" SrcTCPBytes = "832" SrcTCPRetrans = "0" SrcTCPWin = "32623" SrcTCPFlags = "PA"
DstTCPSeqBase = "3330826188" DstTCPAckBytes = "607" DstTCPBytes = "608" DstTCPRetrans = "0" DstTCPWin = "16512" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "1108" DstBytes = "824" SrcAppBytes = "832" DstAppBytes = "608" />
<ArgusTimeStats>
<SrcIdle n = "3" MeanUsec = "5500" StdDev = "1950" MaxUsec = "8112" MinUsec = "3426" />
<DstIdle n = "3" MeanUsec = "4511" StdDev = "3448" MaxUsec = "9387" MinUsec = "1986" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20380" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:48" StartTimeusecs = "32792"
LastDate = "2001-12-18" LastTime = "10:03:48" LastTimeusecs = "32792"
Duration = "0.000000" TransRefNum = "10">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "1:0:5e:0:1:18" />
<Flow> <IP SrcIPAddr = "192.168.0.16" DstIPAddr = "224.0.1.24" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "ptah.newyork.qosient.com" DstName = "microsoft-ds.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20381" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:47" StartTimeusecs = "195653"
LastDate = "2001-12-18" LastTime = "10:03:47" LastTimeusecs = "419671"
Duration = "0.224018" TransRefNum = "7232">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.184.89" Proto = "tcp" Sport = "1646" Dport = "80" IpId = "61d2" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "39903" AckDatauSecs = "87" >
<TCPExtMetrics SrcTCPSeqBase = "2397956265" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "2509763950" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "90755" StdDev = "14262" MaxUsec = "105017" MinUsec = "76493" />
<DstActive n = "2" MeanUsec = "40447" StdDev = "39131" MaxUsec = "79578" MinUsec = "1316" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20382" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:47" StartTimeusecs = "234112"
LastDate = "2001-12-18" LastTime = "10:03:47" LastTimeusecs = "440459"
Duration = "0.206347" TransRefNum = "7233">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.184.89" Proto = "tcp" Sport = "1647" Dport = "80" IpId = "61d3" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "41588" AckDatauSecs = "74" >
<TCPExtMetrics SrcTCPSeqBase = "2398006490" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "2670425482" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "80417" StdDev = "50508" MaxUsec = "130925" MinUsec = "29910" />
<DstActive n = "2" MeanUsec = "18342" StdDev = "15942" MaxUsec = "34284" MinUsec = "2401" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20383" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:47" StartTimeusecs = "331877"
LastDate = "2001-12-18" LastTime = "10:03:47" LastTimeusecs = "902392"
Duration = "0.570515" TransRefNum = "7234">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "216.92.197.167" Proto = "tcp" Sport = "1649" Dport = "110" IpId = "620b" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "47" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "84077" AckDatauSecs = "138" >
<TCPExtMetrics SrcTCPSeqBase = "2398171166" SrcTCPAckBytes = "44" SrcTCPBytes = "44" SrcTCPRetrans = "0" SrcTCPWin = "32730" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "4282408037" DstTCPAckBytes = "37" DstTCPBytes = "37" DstTCPRetrans = "0" DstTCPWin = "16800" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "10" SrcBytes = "616" DstBytes = "603" SrcAppBytes = "44" DstAppBytes = "37" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "75917" StdDev = "80859" MaxUsec = "188257" MinUsec = "1253" />
<SrcIdle n = "5" MeanUsec = "44014" StdDev = "5121" MaxUsec = "53497" MinUsec = "39244" />
<DstActive n = "2" MeanUsec = "20069" StdDev = "18508" MaxUsec = "38577" MinUsec = "1562" />
<DstIdle n = "7" MeanUsec = "63757" StdDev = "51652" MaxUsec = "189979" MinUsec = "40084" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20384" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:47" StartTimeusecs = "350491"
LastDate = "2001-12-18" LastTime = "10:03:48" LastTimeusecs = "332095"
Duration = "0.981604" TransRefNum = "7235">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "206.46.170.10" Proto = "tcp" Sport = "1651" Dport = "110" IpId = "6219" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "mta1pub.gte.net" />
<FlowAttrs SrcTTL = "128" DstTTL = "39" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "124887" AckDatauSecs = "113" >
<TCPExtMetrics SrcTCPSeqBase = "2398357734" SrcTCPAckBytes = "46" SrcTCPBytes = "46" SrcTCPRetrans = "0" SrcTCPWin = "32596" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "4126638272" DstTCPAckBytes = "171" DstTCPBytes = "171" DstTCPRetrans = "0" DstTCPWin = "25200" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "11" SrcBytes = "618" DstBytes = "794" SrcAppBytes = "46" DstAppBytes = "171" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "114493" StdDev = "110737" MaxUsec = "264732" MinUsec = "1094" />
<SrcIdle n = "5" MeanUsec = "85252" StdDev = "5834" MaxUsec = "95647" MinUsec = "78106" />
<DstActive n = "3" MeanUsec = "56175" StdDev = "38812" MaxUsec = "86961" MinUsec = "1427" />
<DstIdle n = "7" MeanUsec = "98313" StdDev = "77631" MaxUsec = "275774" MinUsec = "2775" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20385" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:49" StartTimeusecs = "704897"
LastDate = "2001-12-18" LastTime = "10:03:49" LastTimeusecs = "704897"
Duration = "0.000000" TransRefNum = "12">
<MACAddrs SrcAddr = "0:b0:d0:76:3b:73" DstAddr = "1:0:5e:0:1:1" />
<Flow> <IP SrcIPAddr = "192.168.0.132" DstIPAddr = "224.0.1.1" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "anubis.newyork.qosient.com" DstName = "ntp.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "46" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20386" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:55" StartTimeusecs = "38931"
LastDate = "2001-12-18" LastTime = "10:03:56" LastTimeusecs = "905354"
Duration = "1.866423" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "622b" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "199" SrcTCPBytes = "200" SrcTCPRetrans = "0" SrcTCPWin = "32351" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "219" DstTCPBytes = "240" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "18" DstCount = "12" SrcBytes = "1220" DstBytes = "888" SrcAppBytes = "200" DstAppBytes = "240" />
<ArgusTimeStats>
<SrcActive n = "8" MeanUsec = "103102" StdDev = "54945" MaxUsec = "166151" MinUsec = "11151" />
<SrcIdle n = "9" MeanUsec = "114633" StdDev = "59389" MaxUsec = "192348" MinUsec = "27191" />
<DstActive n = "2" MeanUsec = "9511" StdDev = "2095" MaxUsec = "11606" MinUsec = "7416" />
<DstIdle n = "9" MeanUsec = "204555" StdDev = "68083" MaxUsec = "329943" MinUsec = "130002" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20387" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:57" StartTimeusecs = "58880"
LastDate = "2001-12-18" LastTime = "10:03:58" LastTimeusecs = "395197"
Duration = "1.336317" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6238" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "139" SrcTCPBytes = "140" SrcTCPRetrans = "0" SrcTCPWin = "32191" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "159" DstTCPBytes = "140" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "12" DstCount = "8" SrcBytes = "818" DstBytes = "572" SrcAppBytes = "140" DstAppBytes = "140" />
<ArgusTimeStats>
<SrcActive n = "5" MeanUsec = "159060" StdDev = "34508" MaxUsec = "202517" MinUsec = "112836" />
<SrcIdle n = "7" MeanUsec = "100634" StdDev = "73770" MaxUsec = "205325" MinUsec = "5757" />
<DstIdle n = "7" MeanUsec = "160328" StdDev = "77975" MaxUsec = "281728" MinUsec = "464" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20388" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:57" StartTimeusecs = "554068"
LastDate = "2001-12-18" LastTime = "10:03:57" LastTimeusecs = "790004"
Duration = "0.235936" TransRefNum = "63">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "205.188.10.47" Proto = "tcp" Sport = "1866" Dport = "5190" IpId = "6231" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "205.188.10.47" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2624202979" SrcTCPAckBytes = "5" SrcTCPBytes = "6" SrcTCPRetrans = "0" SrcTCPWin = "31942" SrcTCPFlags = "PA"
DstTCPSeqBase = "3205297455" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "A" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "6" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20389" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:03:59" StartTimeusecs = "188689"
LastDate = "2001-12-18" LastTime = "10:04:01" LastTimeusecs = "99139"
Duration = "1.910450" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "624c" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "279" SrcTCPBytes = "280" SrcTCPRetrans = "0" SrcTCPWin = "31911" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "279" DstTCPBytes = "280" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "20" DstCount = "15" SrcBytes = "1396" DstBytes = "1090" SrcAppBytes = "280" DstAppBytes = "280" />
<ArgusTimeStats>
<SrcActive n = "6" MeanUsec = "147331" StdDev = "22212" MaxUsec = "173289" MinUsec = "112452" />
<SrcIdle n = "14" MeanUsec = "129996" StdDev = "190065" MaxUsec = "793492" MinUsec = "23136" />
<DstIdle n = "14" MeanUsec = "183700" StdDev = "238791" MaxUsec = "999781" MinUsec = "286" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20390" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:01" StartTimeusecs = "409442"
LastDate = "2001-12-18" LastTime = "10:04:02" LastTimeusecs = "447"
Duration = "0.591005" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6252" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "79" SrcTCPBytes = "80" SrcTCPRetrans = "0" SrcTCPWin = "31823" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "87" DstTCPBytes = "88" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "4" SrcBytes = "416" DstBytes = "304" SrcAppBytes = "80" DstAppBytes = "88" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "133958" StdDev = "25664" MaxUsec = "159620" MinUsec = "108297" />
<SrcIdle n = "4" MeanUsec = "158347" StdDev = "99151" MaxUsec = "310303" MinUsec = "40679" />
<DstIdle n = "4" MeanUsec = "227549" StdDev = "147411" MaxUsec = "480104" MinUsec = "109915" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20391" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:04" StartTimeusecs = "236746"
LastDate = "2001-12-18" LastTime = "10:04:04" LastTimeusecs = "804526"
Duration = "0.567780" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6256" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "39" SrcTCPBytes = "40" SrcTCPRetrans = "0" SrcTCPWin = "31783" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "39" DstTCPBytes = "40" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "4" DstCount = "2" SrcBytes = "268" DstBytes = "148" SrcAppBytes = "40" DstAppBytes = "40" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "142745" StdDev = "24444" MaxUsec = "167189" MinUsec = "118301" />
<SrcIdle n = "2" MeanUsec = "1259294" StdDev = "977005" MaxUsec = "2236299" MinUsec = "282290" />
<DstIdle n = "2" MeanUsec = "1425242" StdDev = "974805" MaxUsec = "2400047" MinUsec = "450438" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20392" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:04" StartTimeusecs = "395039"
LastDate = "2001-12-18" LastTime = "10:04:04" LastTimeusecs = "395039"
Duration = "0.000000" TransRefNum = "7236">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20393" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:08" StartTimeusecs = "251034"
LastDate = "2001-12-18" LastTime = "10:04:10" LastTimeusecs = "125603"
Duration = "1.874569" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6260" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "839" SrcTCPBytes = "840" SrcTCPRetrans = "0" SrcTCPWin = "31547" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "235" DstTCPBytes = "256" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "11" SrcBytes = "1398" DstBytes = "850" SrcAppBytes = "840" DstAppBytes = "256" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "54021" StdDev = "48930" MaxUsec = "122188" MinUsec = "9631" />
<SrcIdle n = "7" MeanUsec = "736166" StdDev = "1167229" MaxUsec = "3446508" MinUsec = "4883" />
<DstActive n = "3" MeanUsec = "272638" StdDev = "372639" MaxUsec = "799629" MinUsec = "8549" />
<DstIdle n = "8" MeanUsec = "576454" StdDev = "1174415" MaxUsec = "3559730" MinUsec = "712" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20394" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:10" StartTimeusecs = "312547"
LastDate = "2001-12-18" LastTime = "10:04:10" LastTimeusecs = "612988"
Duration = "0.300441" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6263" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "19" SrcTCPBytes = "20" SrcTCPRetrans = "0" SrcTCPWin = "31507" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "39" DstTCPBytes = "20" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "3" DstCount = "2" SrcBytes = "194" DstBytes = "128" SrcAppBytes = "20" DstAppBytes = "20" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "180799" StdDev = "12000" MaxUsec = "192792" MinUsec = "168807" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20395" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:17" StartTimeusecs = "315587"
LastDate = "2001-12-18" LastTime = "10:04:18" LastTimeusecs = "624665"
Duration = "1.309078" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "626b" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "79" SrcTCPBytes = "80" SrcTCPRetrans = "0" SrcTCPWin = "31407" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "99" DstTCPBytes = "100" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "5" SrcBytes = "536" DstBytes = "370" SrcAppBytes = "80" DstAppBytes = "100" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "133809" StdDev = "73527" MaxUsec = "207475" MinUsec = "11320" />
<SrcIdle n = "3" MeanUsec = "257947" StdDev = "171458" MaxUsec = "500355" MinUsec = "131688" />
<DstIdle n = "3" MeanUsec = "380082" StdDev = "92664" MaxUsec = "509949" MinUsec = "299962" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20396" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:21" StartTimeusecs = "80554"
LastDate = "2001-12-18" LastTime = "10:04:22" LastTimeusecs = "129754"
Duration = "1.049200" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6273" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "819" SrcTCPBytes = "820" SrcTCPRetrans = "0" SrcTCPWin = "32747" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "195" DstTCPBytes = "196" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "8" SrcBytes = "1270" DstBytes = "628" SrcAppBytes = "820" DstAppBytes = "196" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "118454" StdDev = "70751" MaxUsec = "203045" MinUsec = "29878" />
<SrcIdle n = "5" MeanUsec = "629945" StdDev = "948072" MaxUsec = "2455889" MinUsec = "5507" />
<DstActive n = "2" MeanUsec = "404284" StdDev = "395597" MaxUsec = "799881" MinUsec = "8688" />
<DstIdle n = "6" MeanUsec = "441915" StdDev = "969632" MaxUsec = "2610070" MinUsec = "2143" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20397" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:24" StartTimeusecs = "529597"
LastDate = "2001-12-18" LastTime = "10:04:26" LastTimeusecs = "35442"
Duration = "1.505845" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "627b" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "79" SrcTCPBytes = "80" SrcTCPRetrans = "0" SrcTCPWin = "32667" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "79" DstTCPBytes = "80" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "5" SrcBytes = "536" DstBytes = "350" SrcAppBytes = "80" DstAppBytes = "80" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "159712" StdDev = "31709" MaxUsec = "203949" MinUsec = "122521" />
<SrcIdle n = "4" MeanUsec = "816709" StdDev = "937384" MaxUsec = "2399843" MinUsec = "79413" />
<DstIdle n = "4" MeanUsec = "920075" StdDev = "1004631" MaxUsec = "2600058" MinUsec = "360" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20398" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:26" StartTimeusecs = "717934"
LastDate = "2001-12-18" LastTime = "10:04:28" LastTimeusecs = "556087"
Duration = "1.838153" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6282" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "79" SrcTCPBytes = "80" SrcTCPRetrans = "0" SrcTCPWin = "32607" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "59" DstTCPBytes = "80" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "7" DstCount = "5" SrcBytes = "476" DstBytes = "350" SrcAppBytes = "80" DstAppBytes = "80" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "163540" StdDev = "31745" MaxUsec = "187510" MinUsec = "118680" />
<SrcIdle n = "4" MeanUsec = "505575" StdDev = "149024" MaxUsec = "682492" MinUsec = "314855" />
<DstIdle n = "4" MeanUsec = "460062" StdDev = "299462" MaxUsec = "819993" MinUsec = "294" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20399" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:28" StartTimeusecs = "739379"
LastDate = "2001-12-18" LastTime = "10:04:30" LastTimeusecs = "441866"
Duration = "1.702487" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6289" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "59" SrcTCPBytes = "60" SrcTCPRetrans = "0" SrcTCPWin = "32507" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "99" DstTCPBytes = "80" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "7" DstCount = "4" SrcBytes = "462" DstBytes = "296" SrcAppBytes = "60" DstAppBytes = "80" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "121963" StdDev = "67327" MaxUsec = "191016" MinUsec = "11590" />
<SrcIdle n = "3" MeanUsec = "468549" StdDev = "139351" MaxUsec = "583141" MinUsec = "272404" />
<DstIdle n = "3" MeanUsec = "576708" StdDev = "102817" MaxUsec = "710176" MinUsec = "460012" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20400" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:30" StartTimeusecs = "930718"
LastDate = "2001-12-18" LastTime = "10:04:32" LastTimeusecs = "746912"
Duration = "1.816194" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "628f" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "59" SrcTCPBytes = "60" SrcTCPRetrans = "0" SrcTCPWin = "32407" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "99" DstTCPBytes = "100" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "5" SrcBytes = "402" DstBytes = "370" SrcAppBytes = "60" DstAppBytes = "100" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "45017" StdDev = "47375" MaxUsec = "112015" MinUsec = "11397" />
<SrcIdle n = "3" MeanUsec = "723331" StdDev = "172527" MaxUsec = "898996" MinUsec = "488852" />
<DstActive n = "2" MeanUsec = "9562" StdDev = "170" MaxUsec = "9732" MinUsec = "9392" />
<DstIdle n = "3" MeanUsec = "810319" StdDev = "120516" MaxUsec = "900699" MinUsec = "639993" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20401" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:33" StartTimeusecs = "104514"
LastDate = "2001-12-18" LastTime = "10:04:35" LastTimeusecs = "46183"
Duration = "1.941669" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6297" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "99" SrcTCPBytes = "100" SrcTCPRetrans = "0" SrcTCPWin = "32327" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "79" DstTCPBytes = "100" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "6" SrcBytes = "550" DstBytes = "424" SrcAppBytes = "100" DstAppBytes = "100" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "151519" StdDev = "18487" MaxUsec = "177444" MinUsec = "135672" />
<SrcIdle n = "5" MeanUsec = "367793" StdDev = "210580" MaxUsec = "733712" MinUsec = "159473" />
<DstIdle n = "5" MeanUsec = "386040" StdDev = "319648" MaxUsec = "908239" MinUsec = "311" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20402" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:35" StartTimeusecs = "145160"
LastDate = "2001-12-18" LastTime = "10:04:37" LastTimeusecs = "86252"
Duration = "1.941092" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "62a9" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "279" SrcTCPBytes = "280" SrcTCPRetrans = "0" SrcTCPWin = "32047" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "279" DstTCPBytes = "280" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "18" DstCount = "14" SrcBytes = "1276" DstBytes = "1036" SrcAppBytes = "280" DstAppBytes = "280" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "110749" StdDev = "49296" MaxUsec = "159498" MinUsec = "30078" />
<SrcIdle n = "14" MeanUsec = "113814" StdDev = "94723" MaxUsec = "435135" MinUsec = "31776" />
<DstIdle n = "14" MeanUsec = "145719" StdDev = "119757" MaxUsec = "539881" MinUsec = "51935" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20403" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:34" StartTimeusecs = "394845"
LastDate = "2001-12-18" LastTime = "10:04:34" LastTimeusecs = "394845"
Duration = "0.000000" TransRefNum = "7237">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20404" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:37" StartTimeusecs = "251777"
LastDate = "2001-12-18" LastTime = "10:04:39" LastTimeusecs = "54408"
Duration = "1.802631" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "62bb" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "179" SrcTCPBytes = "180" SrcTCPRetrans = "0" SrcTCPWin = "31839" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "207" DstTCPBytes = "188" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "18" DstCount = "9" SrcBytes = "1206" DstBytes = "674" SrcAppBytes = "180" DstAppBytes = "188" />
<ArgusTimeStats>
<SrcActive n = "9" MeanUsec = "146847" StdDev = "25163" MaxUsec = "193851" MinUsec = "114920" />
<SrcIdle n = "9" MeanUsec = "72881" StdDev = "47645" MaxUsec = "156796" MinUsec = "6447" />
<DstIdle n = "9" MeanUsec = "202231" StdDev = "51834" MaxUsec = "322497" MinUsec = "128293" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20405" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:39" StartTimeusecs = "343649"
LastDate = "2001-12-18" LastTime = "10:04:41" LastTimeusecs = "286395"
Duration = "1.942746" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "62c8" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "139" SrcTCPBytes = "140" SrcTCPRetrans = "0" SrcTCPWin = "31719" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "119" DstTCPBytes = "140" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "13" DstCount = "8" SrcBytes = "878" DstBytes = "572" SrcAppBytes = "140" DstAppBytes = "140" />
<ArgusTimeStats>
<SrcActive n = "6" MeanUsec = "154803" StdDev = "22495" MaxUsec = "183281" MinUsec = "111340" />
<SrcIdle n = "7" MeanUsec = "184874" StdDev = "131481" MaxUsec = "428409" MinUsec = "44695" />
<DstIdle n = "7" MeanUsec = "315756" StdDev = "171934" MaxUsec = "591902" MinUsec = "292" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20406" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:41" StartTimeusecs = "457905"
LastDate = "2001-12-18" LastTime = "10:04:42" LastTimeusecs = "961730"
Duration = "1.503825" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "62d1" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "79" SrcTCPBytes = "80" SrcTCPRetrans = "0" SrcTCPWin = "31619" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "99" DstTCPBytes = "80" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "9" DstCount = "6" SrcBytes = "596" DstBytes = "404" SrcAppBytes = "80" DstAppBytes = "80" />
<ArgusTimeStats>
<SrcActive n = "5" MeanUsec = "166079" StdDev = "22031" MaxUsec = "185229" MinUsec = "124447" />
<SrcIdle n = "4" MeanUsec = "213495" StdDev = "77058" MaxUsec = "324167" MinUsec = "116860" />
<DstActive n = "2" MeanUsec = "329763" StdDev = "29981" MaxUsec = "359740" MinUsec = "299787" />
<DstIdle n = "4" MeanUsec = "215168" StdDev = "214959" MaxUsec = "439861" MinUsec = "273" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20407" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:44" StartTimeusecs = "975842"
LastDate = "2001-12-18" LastTime = "10:04:45" LastTimeusecs = "563880"
Duration = "0.588038" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "62d9" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "119" SrcTCPBytes = "120" SrcTCPRetrans = "0" SrcTCPWin = "31499" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "119" DstTCPBytes = "120" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "8" DstCount = "7" SrcBytes = "564" DstBytes = "498" SrcAppBytes = "120" DstAppBytes = "120" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "148422" StdDev = "37776" MaxUsec = "186198" MinUsec = "110646" />
<SrcIdle n = "6" MeanUsec = "384217" StdDev = "729313" MaxUsec = "2014112" MinUsec = "12419" />
<DstIdle n = "6" MeanUsec = "66714" StdDev = "40249" MaxUsec = "127809" MinUsec = "246" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20408" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:47" StartTimeusecs = "915405"
LastDate = "2001-12-18" LastTime = "10:04:49" LastTimeusecs = "776652"
Duration = "1.861247" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6314" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "139" SrcTCPBytes = "140" SrcTCPRetrans = "0" SrcTCPWin = "31379" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "119" DstTCPBytes = "140" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "9" DstCount = "7" SrcBytes = "638" DstBytes = "518" SrcAppBytes = "140" DstAppBytes = "140" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "119874" StdDev = "1790" MaxUsec = "121631" MinUsec = "118118" />
<SrcIdle n = "7" MeanUsec = "566290" StdDev = "760422" MaxUsec = "2351525" MinUsec = "92682" />
<DstIdle n = "7" MeanUsec = "627159" StdDev = "821363" MaxUsec = "2530008" MinUsec = "92272" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20409" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:47" StartTimeusecs = "359614"
LastDate = "2001-12-18" LastTime = "10:04:47" LastTimeusecs = "359614"
Duration = "0.000000" TransRefNum = "7238">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "216.92.197.167" Proto = "tcp" Sport = "1653" Dport = "110" IpId = "62e0" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2413484667" SrcTCPAckBytes = "0" SrcTCPBytes = "0" SrcTCPRetrans = "0" SrcTCPWin = "0" SrcTCPFlags = "S"
DstTCPSeqBase = "0" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "0" DstTCPFlags = "" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "62" DstBytes = "0" SrcAppBytes = "0" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20410" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:47" StartTimeusecs = "351070"
LastDate = "2001-12-18" LastTime = "10:04:47" LastTimeusecs = "566796"
Duration = "0.215726" TransRefNum = "7071">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:c0:4f:7b:e0:87" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.16" Proto = "tcp" Sport = "1525" Dport = "1291" IpId = "62e9" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST" TCPOptions = "MAX|SACKOK" SynAckuSecs = "90" AckDatauSecs = "85" >
<TCPExtMetrics SrcTCPSeqBase = "2181598035" SrcTCPAckBytes = "831" SrcTCPBytes = "832" SrcTCPRetrans = "0" SrcTCPWin = "32015" SrcTCPFlags = "PA"
DstTCPSeqBase = "3330826188" DstTCPAckBytes = "607" DstTCPBytes = "608" DstTCPRetrans = "0" DstTCPWin = "17344" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "1108" DstBytes = "824" SrcAppBytes = "832" DstAppBytes = "608" />
<ArgusTimeStats>
<SrcIdle n = "3" MeanUsec = "4933" StdDev = "2067" MaxUsec = "7840" MinUsec = "3220" />
<DstIdle n = "3" MeanUsec = "4341" StdDev = "3311" MaxUsec = "9023" MinUsec = "1957" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20411" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:47" StartTimeusecs = "373520"
LastDate = "2001-12-18" LastTime = "10:04:49" LastTimeusecs = "207746"
Duration = "1.834226" TransRefNum = "7239">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "206.46.170.10" Proto = "tcp" Sport = "1655" Dport = "110" IpId = "6311" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "mta1pub.gte.net" />
<FlowAttrs SrcTTL = "128" DstTTL = "39" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "71106" AckDatauSecs = "114" >
<TCPExtMetrics SrcTCPSeqBase = "2413643428" SrcTCPAckBytes = "46" SrcTCPBytes = "46" SrcTCPRetrans = "0" SrcTCPWin = "32596" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "40875840" DstTCPAckBytes = "171" DstTCPBytes = "171" DstTCPRetrans = "0" DstTCPWin = "25200" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "11" SrcBytes = "618" DstBytes = "794" SrcAppBytes = "46" DstAppBytes = "171" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "114271" StdDev = "107301" MaxUsec = "259018" MinUsec = "2443" />
<SrcIdle n = "5" MeanUsec = "268726" StdDev = "375837" MaxUsec = "1020331" MinUsec = "76921" />
<DstActive n = "3" MeanUsec = "52020" StdDev = "34829" MaxUsec = "76665" MinUsec = "2764" />
<DstIdle n = "7" MeanUsec = "229579" StdDev = "330471" MaxUsec = "1019739" MinUsec = "2125" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20412" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:49" StartTimeusecs = "938229"
LastDate = "2001-12-18" LastTime = "10:04:51" LastTimeusecs = "172047"
Duration = "1.233818" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6341" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "99" SrcTCPBytes = "100" SrcTCPRetrans = "0" SrcTCPWin = "32727" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "119" DstTCPBytes = "100" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "9" DstCount = "5" SrcBytes = "610" DstBytes = "370" SrcAppBytes = "100" DstAppBytes = "100" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "177255" StdDev = "29134" MaxUsec = "205288" MinUsec = "132216" />
<SrcIdle n = "5" MeanUsec = "139073" StdDev = "102771" MaxUsec = "295445" MinUsec = "21706" />
<DstIdle n = "5" MeanUsec = "246017" StdDev = "130505" MaxUsec = "501886" MinUsec = "149897" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20413" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:50" StartTimeusecs = "270718"
LastDate = "2001-12-18" LastTime = "10:04:50" LastTimeusecs = "796034"
Duration = "0.525316" TransRefNum = "7238">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "216.92.197.167" Proto = "tcp" Sport = "1653" Dport = "110" IpId = "633d" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "47" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK|SRTN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "38901" AckDatauSecs = "147" >
<TCPExtMetrics SrcTCPSeqBase = "2413484667" SrcTCPAckBytes = "44" SrcTCPBytes = "44" SrcTCPRetrans = "1" SrcTCPWin = "32730" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "11184609" DstTCPAckBytes = "37" DstTCPBytes = "37" DstTCPRetrans = "0" DstTCPWin = "16800" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "10" SrcBytes = "616" DstBytes = "603" SrcAppBytes = "44" DstAppBytes = "37" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "65615" StdDev = "70551" MaxUsec = "184981" MinUsec = "1188" />
<SrcIdle n = "5" MeanUsec = "43349" StdDev = "3993" MaxUsec = "50901" MinUsec = "39897" />
<DstActive n = "2" MeanUsec = "23863" StdDev = "22343" MaxUsec = "46206" MinUsec = "1520" />
<DstIdle n = "7" MeanUsec = "62669" StdDev = "45062" MaxUsec = "172701" MinUsec = "40072" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20414" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:55" StartTimeusecs = "558561"
LastDate = "2001-12-18" LastTime = "10:04:55" LastTimeusecs = "799225"
Duration = "0.240664" TransRefNum = "63">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "205.188.10.47" Proto = "tcp" Sport = "1866" Dport = "5190" IpId = "6342" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "205.188.10.47" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2624202979" SrcTCPAckBytes = "5" SrcTCPBytes = "6" SrcTCPRetrans = "0" SrcTCPWin = "31942" SrcTCPFlags = "PA"
DstTCPSeqBase = "3205297455" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "A" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "6" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20415" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:56" StartTimeusecs = "597500"
LastDate = "2001-12-18" LastTime = "10:04:56" LastTimeusecs = "753587"
Duration = "0.156087" TransRefNum = "7240">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.185" Proto = "tcp" Sport = "1656" Dport = "80" IpId = "634c" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "28705" AckDatauSecs = "125" >
<TCPExtMetrics SrcTCPSeqBase = "2416008513" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32234" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "2006483731" DstTCPAckBytes = "533" DstTCPBytes = "533" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "767" SrcAppBytes = "294" DstAppBytes = "533" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "60805" StdDev = "20626" MaxUsec = "81431" MinUsec = "40179" />
<DstActive n = "2" MeanUsec = "21496" StdDev = "19352" MaxUsec = "40848" MinUsec = "2145" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20416" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:56" StartTimeusecs = "599654"
LastDate = "2001-12-18" LastTime = "10:04:56" LastTimeusecs = "785752"
Duration = "0.186098" TransRefNum = "7241">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.185" Proto = "tcp" Sport = "1657" Dport = "80" IpId = "6350" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "36925" AckDatauSecs = "102" >
<TCPExtMetrics SrcTCPSeqBase = "2416045314" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32266" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "1643281865" DstTCPAckBytes = "501" DstTCPBytes = "501" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "735" SrcAppBytes = "294" DstAppBytes = "501" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "72154" StdDev = "38168" MaxUsec = "110322" MinUsec = "33987" />
<DstActive n = "2" MeanUsec = "17786" StdDev = "16686" MaxUsec = "34472" MinUsec = "1100" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20417" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:56" StartTimeusecs = "714872"
LastDate = "2001-12-18" LastTime = "10:04:56" LastTimeusecs = "943538"
Duration = "0.228666" TransRefNum = "7242">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.185" Proto = "tcp" Sport = "1658" Dport = "80" IpId = "6354" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "42562" AckDatauSecs = "82" >
<TCPExtMetrics SrcTCPSeqBase = "2416114267" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3669138570" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "91233" StdDev = "16284" MaxUsec = "107515" MinUsec = "74952" />
<DstActive n = "2" MeanUsec = "40102" StdDev = "37701" MaxUsec = "77803" MinUsec = "2401" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20418" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:04:56" StartTimeusecs = "754564"
LastDate = "2001-12-18" LastTime = "10:04:56" LastTimeusecs = "989826"
Duration = "0.235262" TransRefNum = "7243">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.185" Proto = "tcp" Sport = "1659" Dport = "80" IpId = "6356" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "45727" AckDatauSecs = "80" >
<TCPExtMetrics SrcTCPSeqBase = "2416166550" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "116242257" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "92848" StdDev = "49804" MaxUsec = "142652" MinUsec = "43044" />
<DstActive n = "2" MeanUsec = "24804" StdDev = "22485" MaxUsec = "47289" MinUsec = "2320" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20419" Cause = "Stop"
StartDate = "2001-12-18" StartTime = "10:05:05" StartTimeusecs = "743314"
LastDate = "2001-12-18" LastTime = "10:05:05" LastTimeusecs = "744695"
Duration = "0.001381" TransRefNum = "19">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.1" Proto = "udp" Sport = "137" Dport = "137" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "router.newyork.qosient.com" />
<FlowAttrs Status = "ICMP_MAPPED" SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "110" DstBytes = "0" SrcAppBytes = "68" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20420" Cause = "Stop"
StartDate = "2001-12-18" StartTime = "10:05:07" StartTimeusecs = "245479"
LastDate = "2001-12-18" LastTime = "10:05:07" LastTimeusecs = "246835"
Duration = "0.001356" TransRefNum = "19">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.1" Proto = "udp" Sport = "137" Dport = "137" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "router.newyork.qosient.com" />
<FlowAttrs Status = "ICMP_MAPPED" SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "110" DstBytes = "0" SrcAppBytes = "68" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20421" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:04" StartTimeusecs = "394672"
LastDate = "2001-12-18" LastTime = "10:05:04" LastTimeusecs = "394672"
Duration = "0.000000" TransRefNum = "7244">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20422" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:05" StartTimeusecs = "744695"
LastDate = "2001-12-18" LastTime = "10:05:07" LastTimeusecs = "246835"
Duration = "1.502140" TransRefNum = "20">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "0:1:3:1d:93:a" />
<Flow> <ICMP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.64" Proto = "icmp" IcmpType = "UR" IcmpCode = "Port" IcmpData = "137"/> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "sphynx.newyork.qosient.com" />
<FlowAttrs SrcTTL = "254" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "2" DstCount = "0" SrcBytes = "140" DstBytes = "0" SrcAppBytes = "72" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20423" Cause = "Stop"
StartDate = "2001-12-18" StartTime = "10:05:08" StartTimeusecs = "747667"
LastDate = "2001-12-18" LastTime = "10:05:08" LastTimeusecs = "749023"
Duration = "0.001356" TransRefNum = "19">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.1" Proto = "udp" Sport = "137" Dport = "137" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "router.newyork.qosient.com" />
<FlowAttrs Status = "ICMP_MAPPED" SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "110" DstBytes = "0" SrcAppBytes = "68" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20424" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:08" StartTimeusecs = "749023"
LastDate = "2001-12-18" LastTime = "10:05:08" LastTimeusecs = "749023"
Duration = "0.000000" TransRefNum = "20">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "0:1:3:1d:93:a" />
<Flow> <ICMP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.64" Proto = "icmp" IcmpType = "UR" IcmpCode = "Port" IcmpData = "137"/> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "sphynx.newyork.qosient.com" />
<FlowAttrs SrcTTL = "254" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "70" DstBytes = "0" SrcAppBytes = "36" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20425" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:09" StartTimeusecs = "978142"
LastDate = "2001-12-18" LastTime = "10:05:11" LastTimeusecs = "947112"
Duration = "1.968970" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "636d" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "319" SrcTCPBytes = "320" SrcTCPRetrans = "0" SrcTCPWin = "32427" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "299" DstTCPBytes = "320" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "20" DstCount = "17" SrcBytes = "1424" DstBytes = "1238" SrcAppBytes = "320" DstAppBytes = "320" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "139943" StdDev = "18762" MaxUsec = "169064" MinUsec = "119556" />
<SrcIdle n = "15" MeanUsec = "93612" StdDev = "49192" MaxUsec = "229870" MinUsec = "16829" />
<DstIdle n = "15" MeanUsec = "124796" StdDev = "84811" MaxUsec = "350036" MinUsec = "376" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20426" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:12" StartTimeusecs = "49517"
LastDate = "2001-12-18" LastTime = "10:05:12" LastTimeusecs = "703399"
Duration = "0.653882" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6373" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "59" SrcTCPBytes = "60" SrcTCPRetrans = "0" SrcTCPWin = "32331" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "95" DstTCPBytes = "76" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "4" SrcBytes = "402" DstBytes = "292" SrcAppBytes = "60" DstAppBytes = "76" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "176805" StdDev = "21443" MaxUsec = "205066" MinUsec = "153167" />
<SrcIdle n = "3" MeanUsec = "76960" StdDev = "33848" MaxUsec = "107416" MinUsec = "29751" />
<DstIdle n = "3" MeanUsec = "103476" StdDev = "65309" MaxUsec = "179991" MinUsec = "20420" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20427" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:17" StartTimeusecs = "265895"
LastDate = "2001-12-18" LastTime = "10:05:17" LastTimeusecs = "510405"
Duration = "0.244510" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6376" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "39" SrcTCPBytes = "40" SrcTCPRetrans = "0" SrcTCPWin = "32275" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "55" DstTCPBytes = "56" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "3" DstCount = "3" SrcBytes = "208" DstBytes = "218" SrcAppBytes = "40" DstAppBytes = "56" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20428" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:24" StartTimeusecs = "252145"
LastDate = "2001-12-18" LastTime = "10:05:24" LastTimeusecs = "720925"
Duration = "0.468780" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "637c" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "99" SrcTCPBytes = "100" SrcTCPRetrans = "0" SrcTCPWin = "32175" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "99" DstTCPBytes = "100" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "6" DstCount = "5" SrcBytes = "430" DstBytes = "370" SrcAppBytes = "100" DstAppBytes = "100" />
<ArgusTimeStats>
<SrcIdle n = "4" MeanUsec = "89919" StdDev = "23256" MaxUsec = "117416" MinUsec = "53231" />
<DstIdle n = "4" MeanUsec = "89939" StdDev = "25012" MaxUsec = "119717" MinUsec = "50623" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20429" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:26" StartTimeusecs = "192499"
LastDate = "2001-12-18" LastTime = "10:05:26" LastTimeusecs = "193601"
Duration = "0.001102" TransRefNum = "33">
<Flow> <Arp SrcArpAddr = "192.168.0.160" TargetArpAaddr = "192.168.0.1" ArpMacAddr = "0:60:1d:20:ed:74" /> </Flow>
<IPAddrNames SrcName = "192.168.0.160" TargetName = "router.newyork.qosient.com" />
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "18" DstAppBytes = "18" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20430" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:26" StartTimeusecs = "326251"
LastDate = "2001-12-18" LastTime = "10:05:27" LastTimeusecs = "625134"
Duration = "1.298883" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6388" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "159" SrcTCPBytes = "160" SrcTCPRetrans = "0" SrcTCPWin = "32015" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "159" DstTCPBytes = "160" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "12" DstCount = "8" SrcBytes = "832" DstBytes = "592" SrcAppBytes = "160" DstAppBytes = "160" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "154917" StdDev = "41441" MaxUsec = "197286" MinUsec = "109088" />
<SrcIdle n = "8" MeanUsec = "285567" StdDev = "499338" MaxUsec = "1605326" MinUsec = "59484" />
<DstIdle n = "8" MeanUsec = "362280" StdDev = "515963" MaxUsec = "1708345" MinUsec = "59945" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20431" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:28" StartTimeusecs = "662518"
LastDate = "2001-12-18" LastTime = "10:05:28" LastTimeusecs = "667563"
Duration = "0.005045" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "638a" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "19" SrcTCPBytes = "20" SrcTCPRetrans = "0" SrcTCPWin = "31959" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "55" DstTCPBytes = "56" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "2" DstCount = "2" SrcBytes = "134" DstBytes = "164" SrcAppBytes = "20" DstAppBytes = "56" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20432" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:30" StartTimeusecs = "959860"
LastDate = "2001-12-18" LastTime = "10:05:32" LastTimeusecs = "917667"
Duration = "1.957807" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "639c" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "279" SrcTCPBytes = "280" SrcTCPRetrans = "0" SrcTCPWin = "31487" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "471" DstTCPBytes = "472" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "18" DstCount = "17" SrcBytes = "1276" DstBytes = "1390" SrcAppBytes = "280" DstAppBytes = "472" />
<ArgusTimeStats>
<SrcActive n = "4" MeanUsec = "99651" StdDev = "53776" MaxUsec = "152630" MinUsec = "9943" />
<SrcIdle n = "14" MeanUsec = "275106" StdDev = "575633" MaxUsec = "2292297" MinUsec = "16928" />
<DstActive n = "3" MeanUsec = "78821" StdDev = "52407" MaxUsec = "129854" MinUsec = "6759" />
<DstIdle n = "14" MeanUsec = "286687" StdDev = "586172" MaxUsec = "2300178" MinUsec = "238" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20433" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:34" StartTimeusecs = "394482"
LastDate = "2001-12-18" LastTime = "10:05:34" LastTimeusecs = "394482"
Duration = "0.000000" TransRefNum = "7245">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "Broadcast" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "192.168.0.255" Proto = "udp" Sport = "520" Dport = "520" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "192.168.0.255" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "86" DstBytes = "0" SrcAppBytes = "44" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20434" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:38" StartTimeusecs = "356370"
LastDate = "2001-12-18" LastTime = "10:05:38" LastTimeusecs = "356370"
Duration = "0.000000" TransRefNum = "7246">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.185" Proto = "tcp" Sport = "1660" Dport = "80" IpId = "639d" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2426603778" SrcTCPAckBytes = "0" SrcTCPBytes = "0" SrcTCPRetrans = "0" SrcTCPWin = "0" SrcTCPFlags = "S"
DstTCPSeqBase = "0" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "0" DstTCPFlags = "" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "62" DstBytes = "0" SrcAppBytes = "0" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20435" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:38" StartTimeusecs = "358512"
LastDate = "2001-12-18" LastTime = "10:05:38" LastTimeusecs = "602868"
Duration = "0.244356" TransRefNum = "7247">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.185" Proto = "tcp" Sport = "1661" Dport = "80" IpId = "63a3" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "27776" AckDatauSecs = "118" >
<TCPExtMetrics SrcTCPSeqBase = "2426638399" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "0" SrcTCPWin = "32242" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3221788226" DstTCPAckBytes = "525" DstTCPBytes = "525" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "759" SrcAppBytes = "294" DstAppBytes = "525" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "105283" StdDev = "74147" MaxUsec = "179430" MinUsec = "31136" />
<DstActive n = "2" MeanUsec = "17051" StdDev = "14633" MaxUsec = "31684" MinUsec = "2418" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20436" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:38" StartTimeusecs = "573132"
LastDate = "2001-12-18" LastTime = "10:05:38" LastTimeusecs = "742038"
Duration = "0.168906" TransRefNum = "7248">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.185" Proto = "tcp" Sport = "1662" Dport = "80" IpId = "63a7" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "34914" AckDatauSecs = "72" >
<TCPExtMetrics SrcTCPSeqBase = "2426725188" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "4211409440" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "52586" StdDev = "25093" MaxUsec = "77679" MinUsec = "27494" />
<DstActive n = "2" MeanUsec = "15810" StdDev = "14710" MaxUsec = "30520" MinUsec = "1100" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20437" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:41" StartTimeusecs = "473745"
LastDate = "2001-12-18" LastTime = "10:05:41" LastTimeusecs = "632990"
Duration = "0.159245" TransRefNum = "7249">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "152.163.226.57" Proto = "tcp" Sport = "1663" Dport = "80" IpId = "63b1" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "35241" AckDatauSecs = "79" >
<TCPExtMetrics SrcTCPSeqBase = "2427491989" SrcTCPAckBytes = "439" SrcTCPBytes = "439" SrcTCPRetrans = "0" SrcTCPWin = "32682" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3071944524" DstTCPAckBytes = "85" DstTCPBytes = "85" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "735" DstBytes = "319" SrcAppBytes = "439" DstAppBytes = "85" />
<ArgusTimeStats>
<SrcActive n = "2" MeanUsec = "60116" StdDev = "28061" MaxUsec = "88177" MinUsec = "32056" />
<DstActive n = "2" MeanUsec = "19108" StdDev = "16696" MaxUsec = "35804" MinUsec = "2412" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20438" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:41" StartTimeusecs = "345113"
LastDate = "2001-12-18" LastTime = "10:05:41" LastTimeusecs = "503082"
Duration = "0.157969" TransRefNum = "7246">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "64.12.174.185" Proto = "tcp" Sport = "1660" Dport = "80" IpId = "63ad" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ads.web.aol.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "42" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK|SRTN" TCPOptions = "MAX|SACKOK" SynAckuSecs = "34687" AckDatauSecs = "113" >
<TCPExtMetrics SrcTCPSeqBase = "2426603778" SrcTCPAckBytes = "294" SrcTCPBytes = "294" SrcTCPRetrans = "1" SrcTCPWin = "32254" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "1207090002" DstTCPAckBytes = "513" DstTCPBytes = "513" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "590" DstBytes = "747" SrcAppBytes = "294" DstAppBytes = "513" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "50708" StdDev = "25573" MaxUsec = "86790" MinUsec = "30534" />
<DstActive n = "2" MeanUsec = "16695" StdDev = "14313" MaxUsec = "31008" MinUsec = "2382" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20439" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:46" StartTimeusecs = "393999"
LastDate = "2001-12-18" LastTime = "10:05:46" LastTimeusecs = "393999"
Duration = "0.000000" TransRefNum = "6">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "1:0:5e:0:0:c" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "224.0.0.12" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "dhcp-agents.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20440" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:46" StartTimeusecs = "394428"
LastDate = "2001-12-18" LastTime = "10:05:46" LastTimeusecs = "394428"
Duration = "0.000000" TransRefNum = "7">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "1:0:5e:0:0:2" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "224.0.0.2" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "all-routers.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20441" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:46" StartTimeusecs = "393545"
LastDate = "2001-12-18" LastTime = "10:05:46" LastTimeusecs = "393545"
Duration = "0.000000" TransRefNum = "5">
<MACAddrs SrcAddr = "0:a0:c5:e1:7a:f9" DstAddr = "1:0:5e:0:0:1" />
<Flow> <IP SrcIPAddr = "192.168.0.1" DstIPAddr = "224.0.0.1" Proto = "igmp" Sport = "17" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "router.newyork.qosient.com" DstName = "all-systems.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20442" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:47" StartTimeusecs = "376561"
LastDate = "2001-12-18" LastTime = "10:05:47" LastTimeusecs = "554161"
Duration = "0.177600" TransRefNum = "7071">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:c0:4f:7b:e0:87" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.16" Proto = "tcp" Sport = "1525" Dport = "1291" IpId = "63cc" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "ptah.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "128" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST" TCPOptions = "MAX|SACKOK" SynAckuSecs = "90" AckDatauSecs = "85" >
<TCPExtMetrics SrcTCPSeqBase = "2181598035" SrcTCPAckBytes = "831" SrcTCPBytes = "832" SrcTCPRetrans = "0" SrcTCPWin = "31407" SrcTCPFlags = "PA"
DstTCPSeqBase = "3330826188" DstTCPAckBytes = "607" DstTCPBytes = "608" DstTCPRetrans = "0" DstTCPWin = "16512" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "5" DstCount = "4" SrcBytes = "1108" DstBytes = "824" SrcAppBytes = "832" DstAppBytes = "608" />
<ArgusTimeStats>
<SrcIdle n = "3" MeanUsec = "5437" StdDev = "2552" MaxUsec = "9040" MinUsec = "3458" />
<DstIdle n = "3" MeanUsec = "4825" StdDev = "3890" MaxUsec = "10327" MinUsec = "2038" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20443" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:47" StartTimeusecs = "387300"
LastDate = "2001-12-18" LastTime = "10:05:47" LastTimeusecs = "883675"
Duration = "0.496375" TransRefNum = "7250">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "216.92.197.167" Proto = "tcp" Sport = "1665" Dport = "110" IpId = "63f9" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "47" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "41053" AckDatauSecs = "91" >
<TCPExtMetrics SrcTCPSeqBase = "2429094251" SrcTCPAckBytes = "44" SrcTCPBytes = "44" SrcTCPRetrans = "0" SrcTCPWin = "32730" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "32852528" DstTCPAckBytes = "37" DstTCPBytes = "37" DstTCPRetrans = "0" DstTCPWin = "16800" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "11" DstCount = "10" SrcBytes = "676" DstBytes = "603" SrcAppBytes = "44" DstAppBytes = "37" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "49505" StdDev = "68175" MaxUsec = "145913" MinUsec = "299" />
<SrcIdle n = "6" MeanUsec = "42457" StdDev = "4412" MaxUsec = "49183" MinUsec = "36342" />
<DstActive n = "2" MeanUsec = "45858" StdDev = "6487" MaxUsec = "52345" MinUsec = "39371" />
<DstIdle n = "7" MeanUsec = "51943" StdDev = "41173" MaxUsec = "146436" MinUsec = "2301" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20444" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:47" StartTimeusecs = "400887"
LastDate = "2001-12-18" LastTime = "10:05:48" LastTimeusecs = "294735"
Duration = "0.893848" TransRefNum = "7251">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "206.46.170.10" Proto = "tcp" Sport = "1667" Dport = "110" IpId = "6407" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "mta1pub.gte.net" />
<FlowAttrs SrcTTL = "128" DstTTL = "39" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "SYN|SYNACK|EST|FIN|FINACK" TCPOptions = "MAX|SACKOK" SynAckuSecs = "75111" AckDatauSecs = "79" >
<TCPExtMetrics SrcTCPSeqBase = "2429229898" SrcTCPAckBytes = "46" SrcTCPBytes = "46" SrcTCPRetrans = "0" SrcTCPWin = "32596" SrcTCPFlags = "FSPA"
DstTCPSeqBase = "3654405581" DstTCPAckBytes = "171" DstTCPBytes = "171" DstTCPRetrans = "0" DstTCPWin = "25200" DstTCPFlags = "FSPA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "10" DstCount = "11" SrcBytes = "618" DstBytes = "794" SrcAppBytes = "46" DstAppBytes = "171" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "108882" StdDev = "103774" MaxUsec = "249040" MinUsec = "1113" />
<SrcIdle n = "5" MeanUsec = "83102" StdDev = "2356" MaxUsec = "86070" MinUsec = "80766" />
<DstActive n = "3" MeanUsec = "52482" StdDev = "36106" MaxUsec = "79398" MinUsec = "1446" />
<DstIdle n = "7" MeanUsec = "94470" StdDev = "71324" MaxUsec = "256318" MinUsec = "2803" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20445" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:51" StartTimeusecs = "384951"
LastDate = "2001-12-18" LastTime = "10:05:53" LastTimeusecs = "162321"
Duration = "1.777370" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6415" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "179" SrcTCPBytes = "180" SrcTCPRetrans = "0" SrcTCPWin = "32767" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "179" DstTCPBytes = "180" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "14" DstCount = "9" SrcBytes = "966" DstBytes = "666" SrcAppBytes = "180" DstAppBytes = "180" />
<ArgusTimeStats>
<SrcActive n = "5" MeanUsec = "146799" StdDev = "36311" MaxUsec = "204109" MinUsec = "112295" />
<SrcIdle n = "8" MeanUsec = "130421" StdDev = "128726" MaxUsec = "447088" MinUsec = "10843" />
<DstIdle n = "8" MeanUsec = "207487" StdDev = "172656" MaxUsec = "619907" MinUsec = "39990" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20446" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:51" StartTimeusecs = "357292"
LastDate = "2001-12-18" LastTime = "10:05:51" LastTimeusecs = "357292"
Duration = "0.000000" TransRefNum = "7108">
<MACAddrs SrcAddr = "0:2:2d:4:9f:56" DstAddr = "1:0:5e:7f:ff:fa" />
<Flow> <IP SrcIPAddr = "192.168.0.161" DstIPAddr = "239.255.255.250" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "set.newyork.qosient.com" DstName = "239.255.255.250" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20447" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:51" StartTimeusecs = "211536"
LastDate = "2001-12-18" LastTime = "10:05:51" LastTimeusecs = "211536"
Duration = "0.000000" TransRefNum = "10">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "1:0:5e:0:1:18" />
<Flow> <IP SrcIPAddr = "192.168.0.16" DstIPAddr = "224.0.1.24" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "ptah.newyork.qosient.com" DstName = "microsoft-ds.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20448" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:54" StartTimeusecs = "13303"
LastDate = "2001-12-18" LastTime = "10:05:55" LastTimeusecs = "958124"
Duration = "1.944821" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6424" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "219" SrcTCPBytes = "220" SrcTCPRetrans = "0" SrcTCPWin = "32567" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "199" DstTCPBytes = "220" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "14" DstCount = "12" SrcBytes = "994" DstBytes = "868" SrcAppBytes = "220" DstAppBytes = "220" />
<ArgusTimeStats>
<SrcActive n = "3" MeanUsec = "150554" StdDev = "16727" MaxUsec = "171077" MinUsec = "130111" />
<SrcIdle n = "11" MeanUsec = "212972" StdDev = "237209" MaxUsec = "850982" MinUsec = "16074" />
<DstIdle n = "11" MeanUsec = "257292" StdDev = "282685" MaxUsec = "971552" MinUsec = "252" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20449" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:53" StartTimeusecs = "317924"
LastDate = "2001-12-18" LastTime = "10:05:53" LastTimeusecs = "317924"
Duration = "0.000000" TransRefNum = "12">
<MACAddrs SrcAddr = "0:b0:d0:76:3b:73" DstAddr = "1:0:5e:0:1:1" />
<Flow> <IP SrcIPAddr = "192.168.0.132" DstIPAddr = "224.0.1.1" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "anubis.newyork.qosient.com" DstName = "ntp.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "46" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20450" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:53" StartTimeusecs = "360292"
LastDate = "2001-12-18" LastTime = "10:05:53" LastTimeusecs = "360292"
Duration = "0.000000" TransRefNum = "9">
<MACAddrs SrcAddr = "0:2:2d:4:9f:56" DstAddr = "1:0:5e:0:0:9" />
<Flow> <IP SrcIPAddr = "192.168.0.161" DstIPAddr = "224.0.0.9" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "set.newyork.qosient.com" DstName = "rip2-routers.mcast.net" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20451" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:53" StartTimeusecs = "563004"
LastDate = "2001-12-18" LastTime = "10:05:53" LastTimeusecs = "795352"
Duration = "0.232348" TransRefNum = "63">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:a0:c5:e1:7a:f9" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "205.188.10.47" Proto = "tcp" Sport = "1866" Dport = "5190" IpId = "6416" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "205.188.10.47" />
<FlowAttrs SrcTTL = "128" DstTTL = "43" SrcTOS = "0" DstTOS = "0" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "2624202979" SrcTCPAckBytes = "5" SrcTCPBytes = "6" SrcTCPRetrans = "0" SrcTCPWin = "31942" SrcTCPFlags = "PA"
DstTCPSeqBase = "3205297455" DstTCPAckBytes = "0" DstTCPBytes = "0" DstTCPRetrans = "0" DstTCPWin = "16384" DstTCPFlags = "A" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "1" DstCount = "1" SrcBytes = "60" DstBytes = "60" SrcAppBytes = "6" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20452" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:53" StartTimeusecs = "214432"
LastDate = "2001-12-18" LastTime = "10:05:53" LastTimeusecs = "214432"
Duration = "0.000000" TransRefNum = "11">
<MACAddrs SrcAddr = "0:c0:4f:7b:e0:87" DstAddr = "1:0:5e:7f:ff:fe" />
<Flow> <IP SrcIPAddr = "192.168.0.16" DstIPAddr = "239.255.255.254" Proto = "igmp" Sport = "22" Dport = "0" /> </Flow>
<IPAddrNames SrcName = "ptah.newyork.qosient.com" DstName = "239.255.255.254" />
<FlowAttrs SrcTTL = "1" DstTTL = "0" SrcTOS = "0" DstTOS = "0" />
<Metrics SrcCount = "1" DstCount = "0" SrcBytes = "60" DstBytes = "0" SrcAppBytes = "8" DstAppBytes = "0" />
</ArgusFlowRecord>
<ArgusFlowRecord ArgusSourceId = "192.168.0.132" SequenceNumber = "20453" Cause = "Status"
StartDate = "2001-12-18" StartTime = "10:05:56" StartTimeusecs = "66551"
LastDate = "2001-12-18" LastTime = "10:05:58" LastTimeusecs = "18325"
Duration = "1.951774" TransRefNum = "7148">
<MACAddrs SrcAddr = "0:1:3:1d:93:a" DstAddr = "0:b0:d0:76:3b:73" />
<Flow> <IP SrcIPAddr = "192.168.0.64" DstIPAddr = "192.168.0.132" Proto = "tcp" Sport = "1119" Dport = "22" IpId = "6434" /> </Flow>
<IPAddrNames SrcName = "sphynx.newyork.qosient.com" DstName = "anubis.newyork.qosient.com" />
<FlowAttrs SrcTTL = "128" DstTTL = "64" SrcTOS = "0" DstTOS = "10" />
<ExtFlow> <TCPExtFlow TCPState = "EST" TCPOptions = "None" SynAckuSecs = "0" AckDatauSecs = "0" >
<TCPExtMetrics SrcTCPSeqBase = "765280345" SrcTCPAckBytes = "219" SrcTCPBytes = "220" SrcTCPRetrans = "0" SrcTCPWin = "32347" SrcTCPFlags = "PA"
DstTCPSeqBase = "3512590944" DstTCPAckBytes = "219" DstTCPBytes = "220" DstTCPRetrans = "0" DstTCPWin = "32120" DstTCPFlags = "PA" />
</TCPExtFlow>
</ExtFlow>
<Metrics SrcCount = "16" DstCount = "11" SrcBytes = "1114" DstBytes = "814" SrcAppBytes = "220" DstAppBytes = "220" />
<ArgusTimeStats>
<SrcActive n = "5" MeanUsec = "124506" StdDev = "31914" MaxUsec = "187473" MinUsec = "101910" />
<SrcIdle n = "11" MeanUsec = "130409" StdDev = "146515" MaxUsec = "583408" MinUsec = "33605" />
<DstIdle n = "11" MeanUsec = "187291" StdDev = "191885" MaxUsec = "770059" MinUsec = "49994" />
</ArgusTimeStats>
</ArgusFlowRecord>
<ArgusDataStream.End count = "192" />
</ArgusDataStream>
distrib
>
Mandriva
>
2010.0
>
i586
>
media
>
contrib-release
>
by-pkgid
>
dc2800a8ec9b3e4a05b103066b15d559
>
files
>
73
