Re: tcptrace tcpnorm available

From: Brian Utterback (brian.utterback@Sun.COM)
Date: 01/18/05


Message-ID: <41ED4488.4090800@sun.com>
Date: Tue, 18 Jan 2005 12:16:56 -0500
From: Brian Utterback <brian.utterback@Sun.COM>
Subject: Re: tcptrace tcpnorm available

Sam Jansen wrote:

> I've been using tcptrace and xplot for some time to compare packet
> traces. To be able to view two or more traces on the same scale in
> xplot, I created a program to "normalise" a packet dump. This program
> changes the tcp connections in a pcap file to all start from sequence
> number 0 and modifies the time stamp of each packet to also start from 0.
>
> Once the output packet trace(s) are run through tcptrace, they can be
> compared directly using xplot with it's -x and -y command line options.
>
> I'm unsure whether this program will be of much use to anyone, but on
> the off chance it is, you can find the latest version on my software
> page:
>
> http://www.wand.net.nz/~stj2/nsc/software.html
>
> I've tested it on recent versions of FreeBSD and Linux. It requires
> only g++ to build and is completely free. Feel free to email me with
> any bug reports or feedback.
>
> Cheers,
>
Isn't that the purpose of the -zxy option to tcptrace? I thought it already
did this for plots.

-- 
blu
I voted electronically...I think.
----------------------------------------------------------------------
Brian Utterback - OP/N1 RPE, Sun Microsystems, Inc.
Ph:877-259-7345, Em:brian.utterback-at-ess-you-enn-dot-kom
----------------------------------------------------------------------------
To unsubscribe, send a message with body containing "unsubscribe tcptrace" to
majordomo@tcptrace.org.


This archive was generated by hypermail 2.1.7 : 01/19/05 EST