|
|
Sponsored Content
Top Forums
Shell Programming and Scripting
Sampling pcap file
Post 302471093 by sajal.bhatia on Friday 12th of November 2010 01:15:10 AM
11-12-2010
Thanks !!
First one works better. Don't know why but the second one make some error in counting the packets though the IP count is same.
Can this be extended to print only the IP addresses which are new in each interval by comparing it with previous interval? I mean for example the second interval (10-20 sec) had 30 IP's and first third interval (20-30) had 50 IP's, but out of these 50, 10 are common (i.e. also present in second interval). So the output file has one more column which prints out the new IP's i.e. 40 in this case.
The output file looks like this
#Time Packets IPs New IPs
The first interval (0-10) will have the same values for column 3 (IPs) and Column 4 (New IPs)
Thanks again
First one works better. Don't know why but the second one make some error in counting the packets though the IP count is same.
Can this be extended to print only the IP addresses which are new in each interval by comparing it with previous interval? I mean for example the second interval (10-20 sec) had 30 IP's and first third interval (20-30) had 50 IP's, but out of these 50, 10 are common (i.e. also present in second interval). So the output file has one more column which prints out the new IP's i.e. 40 in this case.
The output file looks like this
#Time Packets IPs New IPs
The first interval (0-10) will have the same values for column 3 (IPs) and Column 4 (New IPs)
Thanks again
|
|
7 More Discussions You Might Find Interesting
1. Programming
I don't know if this is the correct forum to post this but hopefully someone can atleast point me in the right direction if they can't help me.
I am trying to install the Net::Pcap module for perl from Tim Potter version .04. I have installed gcc 2.95.3 on my Solaris 8 box. I am sure it's just... (6 Replies)
Discussion started by: TioTony
6 Replies
2. Programming
I cant use pcap.h include file. How can I do so? :confused: (8 Replies)
Discussion started by: Pervez Sajjad
8 Replies
3. Programming
Can someone please help me figure out how to use pcap.h to sniff packets between only 2 computers whose mac addresses are know?
Thanks (0 Replies)
Discussion started by: papabearcares
0 Replies
4. Shell Programming and Scripting
Can someone please help me figure out how to use pcap.h to sniff packets between only 2 computers whose mac addresses are know?
Thanks (0 Replies)
Discussion started by: papabearcares
0 Replies
5. Shell Programming and Scripting
Hi everyone!
Can you please help me with some shell scripting?
I have an input file input.txt
It has 3 columns (Time, Event, Value)
Time event Value
03:38:22 A 57
03:38:23 A 56
03:38:24 B 24
03:38:25 C 51
03:38:26 B 7
03:38:26 ... (7 Replies)
Discussion started by: Needhelp2
7 Replies
6. Shell Programming and Scripting
I have a requirement where I have multiple flat file sources.
I need to create sample data from each source.
Example:
Source 1 has 10 flat files--
member, transaction,item,email,....etc
Now if I get any 10 records (say first 10 records) from the member flat file, I need to find those matching... (2 Replies)
Discussion started by: arrivederci
2 Replies
7. Programming
Hi Folks,
i got the following Problem: I want to make an analysis on a pcap file. (diestance between different packets and so on) The difficulty now... it's not a simple Ethernet/ IP/ File, but it's a SS7 file.
There are the Layers MTP2 MTP3 and ISUP. My analysis depends on the ISUP Layer.
Now... (0 Replies)
Discussion started by: thisismyname
0 Replies
LEARN ABOUT DEBIAN
ip2host
IP2HOST(1) User Contributed Perl Documentation IP2HOST(1) NAME
ip2host - Resolves IPs to hostnames in web server logs SYNOPSIS
ip2host [OPTIONS] [cache_file] < infile > outfile infile - Web server log file. outfile - Same as input file, but with IPs resolved to hostnames. Options: --children=... Number of child processes to spawn (default: 40) --timeout=... Seconds to wait on DNS response (default: 20) --buffer=... Maximum number of log lines to keep in memory (default: 50000) --flush=... Number of lines to process before flushing output buffer (default: 500) --cache=... Filename to use as disk cache (default: none) --ttl=... Number of seconds before IPs cached on disk are expired (default: 604800 - One week) DESCRIPTION
This is a faster, drop-in replacement for the logresolve utility distributed with the Apache web server. It's been reported to work under Linux, FreeBSD, Solaris, Tru64, and IRIX. AUTHOR
Maurice Aubrey <maurice.aubrey+ip2host@gmail.com> Based on the logresolve.pl script by Rob Hartill. COPYRIGHT
Copyright 1999-2007, Maurice Aubrey <maurice.aubrey+ip2host@gmail.com>. This module is free software; you may redistribute it and/or modify it under the same terms as Perl itself. README
Resolves IPs to hostnames in web server logs. This is a faster, drop-in replacement for the logresolve utility distributed with the Apache web server. SCRIPT CATEGORIES
Web perl v5.14.2 2012-02-15 IP2HOST(1)