1RAHISTO(1)                  General Commands Manual                 RAHISTO(1)
2
3
4

NAME

6       rahisto - print histogram of metrics from argus(8) data.
7

SYNOPSIS

9       rahisto  [-M  histomode] -H bin[L]:range|size ...  [raoptions] [-- fil‐
10       ter-expression]
11

DESCRIPTION

13       Rahisto reads argus data from an argus-data source, sorts  the  records
14       based  on  the  criteria  specified  on the command line, and outputs a
15       valid argus-stream.
16

OPTIONS

18       Rahisto, like all ra based clients, supports a  number  of  ra  options
19       including filtering of input argus records through a terminating filter
20       expression.  See ra(1)  for  a  complete  description  of  ra  options.
21       rahisto(1) specific options are:
22
23       -M nozero
24           Don't print bins that have zero frequencies.
25       -M outlayer
26           Print  accumulated  stats for outlayer values, i.e. the values that
27           are outside the histogram range.
28       -H metric bin[L]:range | size
29
30       Supported metrics are:
31              dur            record total duration.
32              avgdur         record average duration.
33              proto          transaction protocol.
34              sport          source port number.
35              dport          destination port number.
36              stos           source TOS byte value.
37              dtos           destination TOS byte value.
38              sttl           src -> dst TTL value.
39              dttl           dst -> src TTL value.
40              [s|d]bytes     [src | dst] transaction bytes.
41              [s|d]appbytes  [src | dst] application bytes.
42              [s|d]pkts      [src | dst] packet count.
43              [s|d]meansz    [src | dst] mean packet size.
44              [s|d]load      packets per second.
45              [s|d]loss      pkts retransmitted or dropped.
46              [s|d]ploss     percent pkts retransmitted or dropped.
47              [s|d]rate      bits per second.
48
49

INVOCATION

51       A sample invocation of rahisto(1).  This call reads argus(8) data  from
52       inputfile  and  generates  a  frequency  distribution histogram for the
53       transaction duration for HTTP traffic.
54
55       % rahisto -H dur 10 -r ~/argus/data/argus*out.gz - port http
56        N = 194     mean = 15.928685  stddev = 23.728876  max = 81.354462  min = 0.008055
57                  median =  0.079948     95% = 59.208977
58        Class     Interval         Freq    Rel.Freq     Cum.Freq
59            1   0.000000e+00        123    63.4021%     63.4021%
60            2   8.200000e+00          7     3.6082%     67.0103%
61            3   1.640000e+01         13     6.7010%     73.7113%
62            4   2.460000e+01          9     4.6392%     78.3505%
63            5   3.280000e+01          0     0.0000%     78.3505%
64            6   4.100000e+01          0     0.0000%     78.3505%
65            7   4.920000e+01          6     3.0928%     81.4433%
66            8   5.740000e+01         35    18.0412%     99.4845%
67            9   6.560000e+01          0     0.0000%     99.4845%
68           10   7.380000e+01          1     0.5155%    100.0000%
69
70
71       A sample invocation where the call reads argus(8) data  from  inputfile
72       and  generates  a  frequency  distribution histogram for the round-trip
73       time of arp volleys in argus(8) data.
74
75       % rahisto -H dur 10:0-75u  -R /Vol*/Data/Archive/split/*68/2012/0[23] - arp and dur gt 0
76        N = 360     mean = 0.000028  stddev = 0.000007  max = 0.000066  min = 0.000014
77                  median = 0.000031     95% = 0.000028
78                    mode = 0.000026
79        Class     Interval         Freq    Rel.Freq     Cum.Freq
80            1   0.000000e+00          0     0.0000%      0.0000%
81            2   7.500000e-06          2     0.5556%      0.5556%
82            3   1.500000e-05         63    17.5000%     18.0556%
83            4   2.250000e-05        188    52.2222%     70.2778%
84            5   3.000000e-05         71    19.7222%     90.0000%
85            6   3.750000e-05         23     6.3889%     96.3889%
86            7   4.500000e-05         10     2.7778%     99.1667%
87            8   5.250000e-05          2     0.5556%     99.7222%
88            9   6.000000e-05          1     0.2778%    100.0000%
89           10   6.750000e-05          0     0.0000%    100.0000%
90
91
92
94       Copyright (c) 2000-2016 QoSient. All rights reserved.
95
96

SEE ALSO

98       ra(1), rarc(5), argus(8),
99
100

AUTHORS

102       Carter Bullard (carter@qosient.com).
103

BUGS

105rahisto 3.0.8                  07 November 2000                     RAHISTO(1)
Impressum