| 1 | .TH TRACEENDS "1" "September 2011" "traceends (libtrace)" "User Commands" |
|---|
| 2 | .SH NAME |
|---|
| 3 | traceends \- summarise traffic done by every endpoint observed in a trace |
|---|
| 4 | .SH SYNOPSIS |
|---|
| 5 | .B tracetopends |
|---|
| 6 | [ \fB-f \fRbpf | \fB--filter=\fRbpf] |
|---|
| 7 | [ \fB-a \fRaddrtype | \fB--address=\fRaddrtype] |
|---|
| 8 | [ \fB-H | \fB--help] |
|---|
| 9 | |
|---|
| 10 | inputuri [inputuri ...] |
|---|
| 11 | .SH DESCRIPTION |
|---|
| 12 | traceends reports the number of bytes and packets sent and received by each |
|---|
| 13 | endpoint observed in the input trace(s). Usually, you don't want to run this |
|---|
| 14 | program directly \-\- see \fBtracetopends\fR instead. |
|---|
| 15 | |
|---|
| 16 | .TP |
|---|
| 17 | \fB\-f\fR bpf filter |
|---|
| 18 | output only packets that match tcpdump style bpf filter |
|---|
| 19 | |
|---|
| 20 | .TP |
|---|
| 21 | \fB\-A\fR address type |
|---|
| 22 | Specifies how an endpoint should be defined. Suitable options are "mac", "v4" |
|---|
| 23 | and "v6" which will report endpoint stats for each observed MAC address, IPv4 |
|---|
| 24 | address and IPv6 address respectively. |
|---|
| 25 | |
|---|
| 26 | .SH OUTPUT |
|---|
| 27 | Output is written to stdout in columns separated by blank space. |
|---|
| 28 | |
|---|
| 29 | The columns are (in order): |
|---|
| 30 | * Endpoint address |
|---|
| 31 | * Time last observed |
|---|
| 32 | * Packets originating from the endpoint |
|---|
| 33 | * Bytes originating from the endpoint (IP header onwards) |
|---|
| 34 | * Payload originating from the endpoint (post transport header) |
|---|
| 35 | * Packets sent to the endpoint |
|---|
| 36 | * Bytes sent to the endpoint (IP header onwards) |
|---|
| 37 | * Payload sent to the endpoint (post transport header) |
|---|
| 38 | |
|---|
| 39 | .SH EXAMPLES |
|---|
| 40 | Get stats for each individual MAC address in a trace: |
|---|
| 41 | .nf |
|---|
| 42 | traceends -a mac erf:trace.erf.gz |
|---|
| 43 | .fi |
|---|
| 44 | |
|---|
| 45 | .SH LINKS |
|---|
| 46 | More details about traceends (and libtrace) can be found at |
|---|
| 47 | http://www.wand.net.nz/trac/libtrace/wiki/UserDocumentation |
|---|
| 48 | |
|---|
| 49 | .SH SEE ALSO |
|---|
| 50 | libtrace(3), tracemerge(1), tracefilter(1), traceconvert(1), tracesplit_dir(1), |
|---|
| 51 | tracereport(1), tracertstats(1), tracestats(1), tracepktdump(1), traceanon(1), |
|---|
| 52 | tracesummary(1), tracereplay(1), tracediff(1), tracetopends(1) |
|---|
| 53 | |
|---|
| 54 | .SH AUTHORS |
|---|
| 55 | Shane Alcock <salcock@cs.waikato.ac.nz> |
|---|
