1RACOUNT(1) General Commands Manual RACOUNT(1)
2
3
4
6 racount - count things from an argus(8) data file/stream.
7
9 racount [-M addr proto] [raoptions] [-- filter-expression]
10
11
13 Racount reads argus data from an argus-file list, and prints out vari‐
14 ous counts from the data in the file. Racount supports, by default, a
15 single line output that provide total records and pkt and byte counts,
16 broken down by source and destination.
17
18
20 Racount, like all ra based clients, supports a number of ra options
21 including filtering of input argus records through a terminating filter
22 expression. See ra(1) for a complete description of ra options.
23
24 racount specfic options are:
25
26 -M modes
27 Supported modes are:
28 proto Print a count breakdown on protocols seen. racount will
29 report on IP protocols, ether protocols, arp, rarp and
30 unknowwn.
31
32 addr Print a summary report of the occurence of the various
33 types of network addresses encountered. The current
34 list of IANA standard network address types include:
35 IPv4 Unicast ThisNet, Reserved, LoopBack, LinkLocal,
36 TestNet and Private
37 IPv4 Multicast Local, Internet, AdHoc, Reserved,
38 SdpSap, Nasdaq, DisTrans, SrcSpec, Glop, Admin, OrgLocal
39 and SiteLocal
40 IPv6 Loopback, LinkLocal, SiteLocal, Global, V4Com‐
41 pat, V4Mapped and Unspecified
42 IPv6 MulticastNodeLocal, MulticastLinkLocal, Multi‐
43 castSiteLocal, MulticastOrgLocal and MulticastGlobal
44
46 This example runs racount against a single argus data file, generating
47 the default output.
48
49 % racount -r argus.2012.02.13.17.20.00.out.gz
50 racount records total_pkts src_pkts dst_pkts total_bytes src_bytes dst_bytes
51 sum 336 21319 9266 12053 16954495 1329172 15625323
52
53 This example runs racount against a directory containing argus data,
54 generating a protocol breakdown as well as generating a network address
55 summary.
56
57 % racount -M proto addr -r argus.2012.02.13.17.20.00.out.gz
58 racount records total_pkts src_pkts dst_pkts total_bytes src_bytes dst_bytes
59 sum 336 21319 9266 12053 16954495 1329172 15625323
60 Protocol Summary
61 udp 1 28 28 0 14692 14692 0
62 ip 222 20751 8891 11860 16799531 1238670 15560861
63 udp 103 513 324 189 138274 74068 64206
64 udp 1 1 1 0 422 422 0
65 arp 7 16 12 4 936 680 256
66 Address Summary
67 IPv4 Unicast src 0 dst 40
68 IPv4 Unicast Private src 6 dst 3
69 IPv6 LinkLocal src 3 dst 0
70 IPv6 Multicast Link Local src 0 dst 3
71
73 Copyright (c) 2000-2016 QoSient. All rights reserved.
75 Carter Bullard (carter@qosient.com).
77 ra(1), rarc(5), argus(8)
78
79
80
81racount 3.0.8 07 November 2000 RACOUNT(1)