Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

Share this Page URL
Help

COMMAND -z io,stat,interval[,filter][,fi... > EXAMPLE 1 -z io,stat,1,ip.addr==192.... - Pg. 194

Other Programs Packaged with Ethereal EXAMPLE 1 -z dcerpc,rtt,12345778-1234-abcd-ef00- 0123456789ac,1.0 194 will collect data for the Microsoft Security Account Manager (SAMR) interface. EXAMPLE 2 -z dcerpc,rtt,12345778-1234-abcd-ef00-0123456789ac, 1.0ip.addr==192.168.100.40 will collect SAMR RTT statistics for the host 192.168.100.40. Notice that there is no comma between the major.minor and filter.The Tethereal man page example shows that a comma is placed between these parameters, however this will cause Tethereal to report an error and exit. NOTES This option can be used multiple times on the command line. COMMAND -z io,phs[,filter] DESCRIPTION Creates protocol hierarchy statistics listing both number of frames and bytes. If no filter is specified the statistics will be calculated for all frames. If a filter is specified, statistics will be only calculated for those packets that match the filter. EXAMPLE 1 -z io,phs will generate statistics for all traffic. EXAMPLE 2 -z io,phs,ip.addr= =192.168.100.40 will generate statistics for all traffic to and from the host 192.168.100.40. NOTES This option can be used multiple times on the command line. COMMAND -z io,stat,interval[,filter][,filter][,filter]... DESCRIPTION Collects frame and bytes statistics for the capture in intervals of interval seconds. Intervals can be specified either as whole or fractional seconds. Interval can be specified in microsecond (ms) res- olution. If no filter is specified the statistics will be calculated for all frames. If one or more filters are specified, statistics will be calculated for all filters and presented with one column of statistics for each filter. io,stat can also calculate COUNT() SUM() MIN() MAX() and AVG() using a slightly dif- ferent filter syntax: [COUNT|SUM|MIN|MAX|AVG](<field>)<filter>. One important thing to note here is that the field that the calculation is based on must also be part of the filter string or else the calculation will fail. Also, be aware that a field can exist multiple times inside the same packet and will then be counted multiple times in those packets. COUNT(<field>) can be used on any type which has a display filter name. It will count how many times this particular field is encountered in the filtered packet list. SUM(<field> can only be used on named fields of integer type.This will sum together every occurrence of this field's value for each interval. MIN/MAX/AVG(<field>) can only be used on named fields that are either integers or relative time fields.This will calculate the maximum, minimum or average that is seen in each interval. If the field is a relative time field the output will be presented in seconds and three digits after the decimal point.The resolution for time calculations is 1ms; anything smaller will be truncated. EXAMPLE 1 -z io,stat,1,ip.addr==192.168.100.40 will generate 1 second statistics for all traffic to and from host 192.168.100.40.