Some good little programs for what you might be looking for:
http://matthias.vallentin.net/blog/2...ibpcap-traces/
EDIT: This is where I got tcpdstat:
https://github.com/netik/tcpdstat/archive/master.zip
It looks pretty good:
### Protocol Breakdown ###
<<<<
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
[0] total 57594 (100.00%) 49009862 (100.00%) 850.95
[1] ip 57511 ( 99.86%) 49002889 ( 99.99%) 852.06
[2] tcp 57243 ( 99.39%) 48950389 ( 99.88%) 855.13
[3] http(s) 400 ( 0.69%) 416769 ( 0.85%) 1041.92
[3] http(c) 362 ( 0.63%) 38094 ( 0.08%) 105.23
[3] https 390 ( 0.68%) 151439 ( 0.31%) 388.31
[3] irc7000 112 ( 0.19%) 19043 ( 0.04%) 170.03
[3] torrent 19676 ( 34.16%) 37547711 ( 76.61%) 1908.30
[3] other 36303 ( 63.03%) 10777333 ( 21.99%) 296.87
[2] udp 235 ( 0.41%) 34982 ( 0.07%) 148.86
[3] dns 158 ( 0.27%) 15989 ( 0.03%) 101.20
[3] ntp 2 ( 0.00%) 180 ( 0.00%) 90.00
[3] netb-se 2 ( 0.00%) 500 ( 0.00%) 250.00
[3] mcast 43 ( 0.07%) 12699 ( 0.03%) 295.33
[3] other 30 ( 0.05%) 5614 ( 0.01%) 187.13
[2] icmp 33 ( 0.06%) 17518 ( 0.04%) 530.85
>>>>
Rgds.