1RAHISTO(1) General Commands Manual RAHISTO(1)
2
6 rahisto - print histogram of metrics from argus(8) data.
7
9 rahisto [-M histomode] -H bin[L]:range|size ... [raoptions] [-- fil‐
10 ter-expression]
11
13 Rahisto reads argus data from an argus-data source, sorts the records
14 based on the criteria specified on the command line, and outputs a
15 valid argus-stream.
16
18 Rahisto, like all ra based clients, supports a number of ra options
19 including filtering of input argus records through a terminating filter
20 expression. See ra(1) for a complete description of ra options.
21 rahisto(1) specific options are:
22 -M nozero
24 Don't print bins that have zero frequencies.
25 -M outlayer
26 Print accumulated stats for outlayer values, i.e. the values that
27 are outside the histogram range.
28 -H metric bin[L]:range | size
29 Supported metrics are:
31 dur record total duration.
32 avgdur record average duration.
33 proto transaction protocol.
34 sport source port number.
35 dport destination port number.
36 stos source TOS byte value.
37 dtos destination TOS byte value.
38 sttl src -> dst TTL value.
39 dttl dst -> src TTL value.
40 [s|d]bytes [src | dst] transaction bytes.
41 [s|d]appbytes [src | dst] application bytes.
42 [s|d]pkts [src | dst] packet count.
43 [s|d]meansz [src | dst] mean packet size.
44 [s|d]load packets per second.
45 [s|d]loss pkts retransmitted or dropped.
46 [s|d]ploss percent pkts retransmitted or dropped.
47 [s|d]rate bits per second.
48
51 A sample invocation of rahisto(1). This call reads argus(8) data from
52 inputfile and generates a frequency distribution histogram for the
53 transaction duration for HTTP traffic.
54 % rahisto -H dur 10 -r ~/argus/data/argus*out.gz - port http
56 N = 194 mean = 15.928685 stddev = 23.728876 max = 81.354462 min = 0.008055
57 median = 0.079948 95% = 59.208977
58 Class Interval Freq Rel.Freq Cum.Freq
59 1 0.000000e+00 123 63.4021% 63.4021%
60 2 8.200000e+00 7 3.6082% 67.0103%
61 3 1.640000e+01 13 6.7010% 73.7113%
62 4 2.460000e+01 9 4.6392% 78.3505%
63 5 3.280000e+01 0 0.0000% 78.3505%
64 6 4.100000e+01 0 0.0000% 78.3505%
65 7 4.920000e+01 6 3.0928% 81.4433%
66 8 5.740000e+01 35 18.0412% 99.4845%
67 9 6.560000e+01 0 0.0000% 99.4845%
68 10 7.380000e+01 1 0.5155% 100.0000%
69 A sample invocation where the call reads argus(8) data from inputfile
72 and generates a frequency distribution histogram for the round-trip
73 time of arp volleys in argus(8) data.
74 % rahisto -H dur 10:0-75u -R /Vol*/Data/Archive/split/*68/2012/0[23] - arp and dur gt 0
76 N = 360 mean = 0.000028 stddev = 0.000007 max = 0.000066 min = 0.000014
77 median = 0.000031 95% = 0.000028
78 mode = 0.000026
79 Class Interval Freq Rel.Freq Cum.Freq
80 1 0.000000e+00 0 0.0000% 0.0000%
81 2 7.500000e-06 2 0.5556% 0.5556%
82 3 1.500000e-05 63 17.5000% 18.0556%
83 4 2.250000e-05 188 52.2222% 70.2778%
84 5 3.000000e-05 71 19.7222% 90.0000%
85 6 3.750000e-05 23 6.3889% 96.3889%
86 7 4.500000e-05 10 2.7778% 99.1667%
87 8 5.250000e-05 2 0.5556% 99.7222%
88 9 6.000000e-05 1 0.2778% 100.0000%
89 10 6.750000e-05 0 0.0000% 100.0000%
90
94 Copyright (c) 2000-2016 QoSient. All rights reserved.
95
98 ra(1), rarc(5), argus(8),
99
102 Carter Bullard (carter@qosient.com).
103
105rahisto 3.0.8 07 November 2000 RAHISTO(1)