stime.awk 567 B

12345678910111213141516171819
  1. $6 !~ /^ack/ && $5 !~ /[SFR]/ {
  2. # given a tcpdump ftp trace, output one line for each send
  3. # in the form
  4. # <send time> <seq no>
  5. # where <send time> is the time packet was sent (in seconds with
  6. # zero at time of first packet) and <seq no> is the tcp sequence
  7. # number of the packet divided by 1024 (i.e., Kbytes sent).
  8. #
  9. # convert time to seconds
  10. n = split ($1,t,":")
  11. tim = t[1]*3600 + t[2]*60 + t[3]
  12. if (! tzero) {
  13. tzero = tim
  14. OFS = "\t"
  15. }
  16. # get packet sequence number
  17. i = index($6,":")
  18. printf "%7.2f\t%g\n", tim-tzero, substr($6,1,i-1)/1024
  19. }