Thanks for the answer, Indeed it has no sense what I asked, Actually what I want to visualize the flows from a dump file and get a clarified idea of what is happening on the net. My first step was counting the number of packets from each source implied in the dump (IP A) to each source connected (IP B), in all port (port a, b c). True my question was wrong asked.