Help with tcpdump file

[brokensilence]

Dear Frends?? need ur help

first of all i am new to this forum.secondly i m in desperate need of help with tcpdump. my problem is i got a dump file n i need to get the following parameters from it. but i dont need command for them. the patameters are the following :

Number of IP addresses contacted
Number of packet per each connection
How much data per connection has exchanged
Number of over all connections
What are the distributions of connection?
Constant number of connection over time. does it change or remain constant.
Randomization of ports per connection
Number of connection per port.
Time between first and last Packet
Average packet size
Average packet/sec
Total bytes, average bytes/sec
and
Average Kbits/sec

thanks

[J65nko]

This is not a trivial problem.

You will need:

• A good study of the tcpdump man page for the display format of the tcpdump file.
• A reasonable knowledge of regular expressions to parse the file
• Knowledge of a script language like awk, perl, python or ruby to produce the stats.

[audio]

I wouldn't try using tcpdump to analyze the packet capture to get the data you want. I'd try using something like argus. Perhaps there is a better tool out there though.