racount

Langue: en

Version: 07 November 2000 (mandriva - 01/05/08)

Section: 1 (Commandes utilisateur)

NAME

racount - count things from an argus(8) data file/stream. Copyright (c) 2000-2003 QoSient. All rights reserved.

SYNOPSIS

racount -r argus-file [ra options]

DESCRIPTION

Racount reads argus data from an argus-file list, and prints out various counts from the data in the file.

OPTIONS

Racount, like all ra based clients, supports a number of ra options including filtering of input argus records through a terminating filter expression. See ra(1) for a complete description of ra options.

EXAMPLE INVOCATION

racount -r argus.file
 racount    records       total_pkts         src_pkts         dst_pkts      total_bytes        src_bytes        dst_bytes
     sum        279             1112              661              451           165567            94561            71006
 
 

racount -ar argus.file

 racount    records       total_pkts         src_pkts         dst_pkts      total_bytes        src_bytes        dst_bytes
     tcp         47              777              405              372           119782            66541            53241
     udp        135              180              137               43            35987            20466            15521
    icmp         18               47               40                7             3318             2814              504
      ip         50               50               50                0             3000             3000                0
     arp         29               58               29               29             3480             1740             1740
     sum        279             1112              661              451           165567            94561            71006
 
 
racount -r argus.file - tcp and retrans
 racount    records       total_pkts         src_pkts         dst_pkts      total_bytes        src_bytes        dst_bytes
     tcp         15              276              141              135            22073             8758            13315
 
 

AUTHORS

 Carter Bullard (carter@qosient.com).
 

SEE ALSO

ra(1), rarc(5), argus(8) tcpdump(1),