1*b636d99dSDavid van Moolenbroek$6 !~ /^ack/ && $5 !~ /[SFR]/ { 2*b636d99dSDavid van Moolenbroek # given a tcpdump ftp trace, output one line for each send 3*b636d99dSDavid van Moolenbroek # in the form 4*b636d99dSDavid van Moolenbroek # <send time> <seq no> 5*b636d99dSDavid van Moolenbroek # where <send time> is the time packet was sent (in seconds with 6*b636d99dSDavid van Moolenbroek # zero at time of first packet) and <seq no> is the tcp sequence 7*b636d99dSDavid van Moolenbroek # number of the packet divided by 1024 (i.e., Kbytes sent). 8*b636d99dSDavid van Moolenbroek # 9*b636d99dSDavid van Moolenbroek # convert time to seconds 10*b636d99dSDavid van Moolenbroek n = split ($1,t,":") 11*b636d99dSDavid van Moolenbroek tim = t[1]*3600 + t[2]*60 + t[3] 12*b636d99dSDavid van Moolenbroek if (! tzero) { 13*b636d99dSDavid van Moolenbroek tzero = tim 14*b636d99dSDavid van Moolenbroek OFS = "\t" 15*b636d99dSDavid van Moolenbroek } 16*b636d99dSDavid van Moolenbroek # get packet sequence number 17*b636d99dSDavid van Moolenbroek i = index($6,":") 18*b636d99dSDavid van Moolenbroek printf "%7.2f\t%g\n", tim-tzero, substr($6,1,i-1)/1024 19*b636d99dSDavid van Moolenbroek } 20