NAME
racount - count things from an argus(8) data file/stream.
COPYRIGHT
Copyright (c) 2000-2003 QoSient. All rights reserved.
SYNOPSIS
racount -r argus-file [ra options]
DESCRIPTION
Racount reads argus data from an argus-file list, and prints out
various counts from the data in the file.
OPTIONS
Racount, like all ra based clients, supports a number of ra options
including filtering of input argus records through a terminating filter
expression. See ra(1) for a complete description of ra options.
EXAMPLE INVOCATION
racount -r argus.file
racount records total_pkts src_pkts dst_pkts total_bytes src_bytes dst_bytes
sum 279 1112 661 451 165567 94561 71006
racount -ar argus.file
racount records total_pkts src_pkts dst_pkts total_bytes src_bytes dst_bytes
tcp 47 777 405 372 119782 66541 53241
udp 135 180 137 43 35987 20466 15521
icmp 18 47 40 7 3318 2814 504
ip 50 50 50 0 3000 3000 0
arp 29 58 29 29 3480 1740 1740
sum 279 1112 661 451 165567 94561 71006
racount -r argus.file - tcp and retrans
racount records total_pkts src_pkts dst_pkts total_bytes src_bytes dst_bytes
tcp 15 276 141 135 22073 8758 13315
AUTHORS
Carter Bullard (carter@qosient.com).
SEE ALSO
ra(1), rarc(5), argus(8) tcpdump(1),
07 November 2000