[ARGUS] ra. output format

[Carter Bullard]

Hey Konstantin,
   Argus tracks loss in IP flows when a protocol that argus
explicitly understands has an sequence number.  For these
protocols, (tcp, rtp and esp) argus reports the number of
missing sequence numbers in a given reporting period
(FAR_STATUS_INTERVAL).  For TCP the loss number is equal to
the retransmission number, which makes some sense.  We do
make an attempt at dealing with out of order packets,
especially for TCP, so the numbers should reflect total
number of missing sequence numbers in that slice.

Carter



> From: Konstantin Borovik <kborovik at yrl.ab.ca>
> Date: Thu, 19 Aug 2004 12:22:20 -0600
> To: <argus-info at lists.andrew.cmu.edu>
> Subject: [ARGUS] ra. output format
> 
> Hi,
> 
> Version: argus-2.0.6.
> 
> Question: What parameter "-s loss" represents for RA tool?
> 
> I figured that it is percentage of lost packets. What I am not clear on,
> if we take left number (that represents source), is it retransmissions
> by source or lost packets by source?
> 
> PS. Could not find any comments on this in source files.
> 
> Thank you.
> 
> Konstantin.
>