protocol table (version 2) counters (packets and bytes) versus IP protocol (TCP, UDP, ICMP, IGMP, et. al.) sparse table, there are no entries for protocols that were not seen in the measured traffic