----- Original Message ----- From: "Miguel A Paraz" <[EMAIL PROTECTED]> To: "Philippine Linux Users Group Mailing List" <[EMAIL PROTECTED]> Sent: Wednesday, November 10, 2004 7:36 PM Subject: Re: [plug] Fun with pcap/tcpdump output files
> Before I get to try it... has anyone used ntop or related pcap tools > for performance auditing? I (and most people it seems) use it for > security and packet analysis. those tools are not design for performance analysis but as what you have said for security and packet analysis only :-> tcpdump is my best friend when it comes to that :-> > I'd like to measure the throughput, latency, and setup time for TCP > connections. Am I looking in the right place? (Netflow/flow-tools not > applicable since I don't have router access.) http://www.netperf.org/ > Re: > > tcpdump -x -r /path/filename > > > > just extract the size, source and destination address with its corresponding > > offset in the ip header... > > Too much text in and out the pipe. that is simply because of the -s 0 thing you did :-> if you are only looking for the size of a packet, source and destination address, -s 20 will do the job... the default value of snaplen (which is 68 bytes) is adequate for ip, icmp, tcp and udp headers.. fooler. -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
