racount (1)

Copyright (c) 2000-2003 QoSient. All rights reserved.

racount -r argus-file [ra options]

Racount reads argus data from an argus-file list, and prints out various counts from the data in the file.

Racount, like all ra based clients, supports a number of ra options including filtering of input argus records through a terminating filter expression. See ra(1) for a complete description of ra options.

racount -r argus.file

racount    records       total_pkts         src_pkts         dst_pkts      total_bytes        src_bytes        dst_bytes
    sum        279             1112              661              451           165567            94561            71006

racount -ar argus.file

racount    records       total_pkts         src_pkts         dst_pkts      total_bytes        src_bytes        dst_bytes
    tcp         47              777              405              372           119782            66541            53241
    udp        135              180              137               43            35987            20466            15521
   icmp         18               47               40                7             3318             2814              504
     ip         50               50               50                0             3000             3000                0
    arp         29               58               29               29             3480             1740             1740
    sum        279             1112              661              451           165567            94561            71006

racount -r argus.file - tcp and retrans

racount    records       total_pkts         src_pkts         dst_pkts      total_bytes        src_bytes        dst_bytes
    tcp         15              276              141              135            22073             8758            13315

Carter Bullard ([email protected]).

ra(1), rarc(5), argus(8) tcpdump(1),