| ||
Sat 2025-02-22
Wed 2025-02-19
Tue 2025-02-18
Sun 2025-02-16
Sat 2025-02-15
Fri 2025-02-14
Thu 2025-02-13
Wed 2025-02-12
Sun 2025-02-09
Fri 2025-02-07
David Hockney's A Rake's Progress Thu 2025-02-06
Wed 2025-02-05
Search
Archives
2024
12 11 10 09 08 07 06 05 04 03 02 01
2023
2022
2021
2020
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008
2007
2006
2005
2004
2003
One good site
MDN
Nelson Minar
Blog licensed under a Creative Commons License
|
ethereal
has a cool little-known feature: the -z
option
to generate statistics from a pcap file. For instance, here's how to
get a count of how much traffic you saw every five minutes:
$ tethereal -q -r foo.pcap -z io,stat,300
===========================================
IO Statistics
Interval: 300.000 secs
Column #0:
| Column #0
Time |frames| bytes
000.000-300.000 3832 344880
300.000-600.000 3744 336960
600.000-900.000 2316 208440
===========================================
The query language is pretty bizarre and protocol specific but there
are some useful analysis tools. There's also the
proto,colinfo option which lets you select out arbitrary
protocol columns to print in the text dump from tethereal.
|
|
