small scrip contribution

[Carter Bullard]

Hello Fabien,
   Sorry for the delayed response, I was away for a few
days.  My e-mail did not have the raqual.pl attachment,
so please resend.  Do you have any documentation for
the script?  Thanks!!! and yes, we'll put it in the
client distribution when you are ready!!!

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com 

-----Original Message-----
From: owner-argus-info at lists.andrew.cmu.edu
[mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Fabien
COELHO
Sent: Tuesday, May 22, 2001 5:56 AM
To: ARGUS software mailing list
Subject: small scrip contribution 



Hello,

Please find enclosed a magnificent perl script and two additionnal small
scripts I wrote with my very own little fingers. The object is to
collect line quality data (well, really TCP/IP retransmission rates)
aggregated with different criterions (that is by dst ip, src ip, size,
hour...). I needed this feature to analyse a particular problem here,
and could not find how to do it directly with argus privided commands.
The script takes as input a xml argus flow and collects statistics.

example usage :

shell> raxml -n -r argusfile.gz - tcp port 80 and ... |\
  raqual.pl --group-by=dip --drate=1.1 | units.pl | tabify.pl

DstIP   rate    src-rate        dst-rate        #src-retrans
#src-packets	src-volume      #dst-retrans    #dst-packets
dst-volume
193.48.171.100  1.09    1.04    1.13    1.6K    38.4K   3.6M    6.0K
45.2K	22.2M
193.48.171.196  1.47    1.01    1.88    37      3.4K    259.4K  3.5K
3.9K	3.6M
193.48.171.231  1.06    1.01    1.1     4.2K    304.4K  29.3M   38.9K
385.5K	314.1M
193.48.171.232  1.31    1.01    1.59    598     58.5K   4.7M    38.3K
64.5K	50.8M
193.48.171.244  1.39    1.01    1.74    447     25.8K   2.1M    20.9K
27.9K	26.0M
193.48.171.247  1.41    1.01    1.74    4.5K    386.0K  32.0M   344.0K
461.8K	412.3M
193.48.171.251  1.32    1.01    1.59    76      3.8K    333.3K  2.6K
4.3K	3.7M
193.48.171.99   1.08    1       1.14    1       5.1K    311.2K  1.1K
8.0K	11.7M
193.48.180.195  1.06    1.02    1.1     1.6K    79.9K   12.8M   9.9K
94.2K	81.7M
*       1.14    1.03    1.24    61.7K   1.9M    318.4M  535.9K  2.2M
1.5G

It is still partial, but I thought it might be useful to someone in that
state. Might be put in some contrib directory in the distribution.

Hope this help, have a nice day anyway,

-- 
Fabien.