---

stime.awk

$6 !~ /^ack/ && $5 !~ /[SFR]/ { # given a tcpdump ftp trace, output one line for each send # in the form # <send time> <seq no> # where <send time> is the time packet was sent (in seconds with # zero at time of first packet) and <seq no> is the tcp sequence # number of the packet divided by 1024 (i.e., Kbytes sent). # # convert time to seconds n = split ($1,t,":") tim = t[1]*3600 + t[2]*60 + t[3] if (! tzero) { tzero = tim OFS = "\t" } # get packet sequence number i = index($6,":") printf "%7.2f\t%g\n", tim-tzero, substr($6,1,i-1)/1024 }

---

docroot: /var/www/469ed2f6-4d4b-4a8a-9f5e-ee4ef04d3bc8/public_html

---

curdir: /usr/share/doc/tcpdump/examples

	.		4096
	..		4096
X	atime.awk		528
X	packetdat.awk		1428
X	send-ack.awk		1598
X	stime.awk		566