[ILUG] [Possibly OT] Network Traffic Analysis and InterfaceControl

[Hamilton, David (TSG C&I)]

Thanks Padraig,

I changed it a little bit, but you got me going in the right direction.
Just in case anyone is interested, the 5 minute error count will be calculated with this:

tethereal -t ad -T text -r capture.dat -z "io,stat,60,COUNT(tcp.analysis.retransmission)tcp.analysis.retransmission,COUNT(tcp.analysis.window_full)tcp.analysis.window_full,COUNT(tcp.analysis.zero_window)tcp.analysis.zero_window,COUNT(tcp.analysis.duplicate_ack)tcp.analysis.duplicate_ack" -q |tail -6 |head -5 |awk '{ print $2 "," $3 "," $4 "," $5 }' | (tr ',\n' + && echo 0) |bc

This will return the total count of retransmissions, window full, zero window and duplicate ack occurences in the last 5 minutes from the capture file.

Now to work on what to do when I get the answer I don't want...

	D.

-----Original Message-----
From: Pádraig Brady [mailto:P at draigBrady.com] 
Sent: 23 February 2006 13:36
To: Hamilton, David (TSG C&I)
Subject: Re: [ILUG] [Possibly OT] Network Traffic Analysis and InterfaceControl

Hamilton, David (TSG C&I) wrote:

>OK. Progress has been made, but there's still plenty more to go.
>
>I now have tethereal returning me a set of results in the form:
>
>a,b,c,d
>e,f,g,h
>i,j,k,l
>m,n,o,p
>q,r,s,t
>
>So I just need to work out how to add up the 20 numbers.
>The comma delimiter was put in intentionally by me, and can be removed 
>very easily.
>
>Thanks,
>	David.
>  
>
I haven't followed the tread, but if you want to add the numbers from the shell:

tethereal output | (tr '\n,' + && echo 0) | bc


Pádraig.