racount(1)

1RACOUNT(1)                  General Commands Manual                 RACOUNT(1)
2
3
4

NAME

6       racount - count things from an argus(8) data file/stream.
7

SYNOPSIS

9       racount [-M addr proto] [raoptions] [-- filter-expression]
10
11

DESCRIPTION

13       Racount  reads argus data from an argus-file list, and prints out vari‐
14       ous counts from the data in the file.  Racount supports, by default,  a
15       single  line output that provide total records and pkt and byte counts,
16       broken down by source and destination.
17
18

OPTIONS

20       Racount, like all ra based clients, supports a  number  of  ra  options
21       including filtering of input argus records through a terminating filter
22       expression.  See ra(1) for a complete description of ra options.
23
24       racount specfic options are:
25
26       -M modes
27           Supported modes are:
28              proto   Print a count breakdown on protocols seen.  racount will
29                      report  on  IP protocols, ether protocols, arp, rarp and
30                      unknowwn.
31
32              addr    Print a summary report of the occurence of  the  various
33                      types  of  network  addresses  encountered.  The current
34                      list of IANA standard network address types include:
35                          IPv4 Unicast ThisNet, Reserved, LoopBack, LinkLocal,
36                      TestNet and Private
37                          IPv4  Multicast  Local,  Internet,  AdHoc, Reserved,
38                      SdpSap, Nasdaq, DisTrans, SrcSpec, Glop, Admin, OrgLocal
39                      and SiteLocal
40                          IPv6  Loopback, LinkLocal, SiteLocal, Global, V4Com‐
41                      pat, V4Mapped and Unspecified
42                          IPv6 MulticastNodeLocal, MulticastLinkLocal,  Multi‐
43                      castSiteLocal, MulticastOrgLocal and MulticastGlobal
44

EXAMPLE INVOCATION

46       This  example runs racount against a single argus data file, generating
47       the default output.
48
49       % racount -r argus.2012.02.13.17.20.00.out.gz
50       racount   records     total_pkts     src_pkts       dst_pkts       total_bytes        src_bytes          dst_bytes
51           sum   336         21319          9266           12053          16954495           1329172            15625323
52
53       This example runs racount against a directory  containing  argus  data,
54       generating a protocol breakdown as well as generating a network address
55       summary.
56
57       % racount -M proto addr -r argus.2012.02.13.17.20.00.out.gz
58       racount   records     total_pkts     src_pkts       dst_pkts       total_bytes        src_bytes          dst_bytes
59           sum   336         21319          9266           12053          16954495           1329172            15625323
60       Protocol Summary
61           udp   1           28             28             0              14692              14692              0
62            ip   222         20751          8891           11860          16799531           1238670            15560861
63           udp   103         513            324            189            138274             74068              64206
64           udp   1           1              1              0              422                422                0
65           arp   7           16             12             4              936                680                256
66       Address Summary
67         IPv4 Unicast              src 0           dst 40
68         IPv4 Unicast Private      src 6           dst 3
69         IPv6 LinkLocal            src 3           dst 0
70         IPv6 Multicast Link Local src 0           dst 3
71

COPYRIGHT

73       Copyright (c) 2000-2016 QoSient. All rights reserved.

AUTHORS

75       Carter Bullard (carter@qosient.com).