Sponsored Content
Full Discussion: Sampling pcap file
Top Forums Shell Programming and Scripting Sampling pcap file Post 302471685 by Chubler_XL on Sunday 14th of November 2010 05:28:26 PM
Old 11-14-2010
This is what I understood your requirement was (each line displays a count of IPs used in the current interval and count of new IPs introduced, ie not seen in the file up to this point).

The array GIP (Global IP) contains each IP seen in the file so far. Each time an IP not in this array is seen it's added to this array and the new counter is incremented.

Perhaps this is wrong, when I re-read your post it appears you only want those IPs not seen in the previous interval (as opposed to the whole file) is this correct?
Code:
Interval   IP
A           192.168.1.1
A           192.168.1.2
A           192.168.1.3
B           192.168.1.1
B           192.168.1.4
C           192.168.1.3
C           192.168.1.2

For Interval,Count,New should we get
Code:
A,3,3
B,2,1
C,2,2

or
Code:
A,3,3
B,2,1
C,2,0

 

7 More Discussions You Might Find Interesting

1. Programming

Compiling Pcap.c

I don't know if this is the correct forum to post this but hopefully someone can atleast point me in the right direction if they can't help me. I am trying to install the Net::Pcap module for perl from Tim Potter version .04. I have installed gcc 2.95.3 on my Solaris 8 box. I am sure it's just... (6 Replies)
Discussion started by: TioTony
6 Replies

2. Programming

pcap.h

I cant use pcap.h include file. How can I do so? :confused: (8 Replies)
Discussion started by: Pervez Sajjad
8 Replies

3. Programming

Pcap.h Sniffing

Can someone please help me figure out how to use pcap.h to sniff packets between only 2 computers whose mac addresses are know? Thanks (0 Replies)
Discussion started by: papabearcares
0 Replies

4. Shell Programming and Scripting

Pcap.h Sniffing

Can someone please help me figure out how to use pcap.h to sniff packets between only 2 computers whose mac addresses are know? Thanks (0 Replies)
Discussion started by: papabearcares
0 Replies

5. Shell Programming and Scripting

Sampling and Binning- Engineering problem

Hi everyone! Can you please help me with some shell scripting? I have an input file input.txt It has 3 columns (Time, Event, Value) Time event Value 03:38:22 A 57 03:38:23 A 56 03:38:24 B 24 03:38:25 C 51 03:38:26 B 7 03:38:26 ... (7 Replies)
Discussion started by: Needhelp2
7 Replies

6. Shell Programming and Scripting

data sampling

I have a requirement where I have multiple flat file sources. I need to create sample data from each source. Example: Source 1 has 10 flat files-- member, transaction,item,email,....etc Now if I get any 10 records (say first 10 records) from the member flat file, I need to find those matching... (2 Replies)
Discussion started by: arrivederci
2 Replies

7. Programming

printing out information from pcap file

Hi Folks, i got the following Problem: I want to make an analysis on a pcap file. (diestance between different packets and so on) The difficulty now... it's not a simple Ethernet/ IP/ File, but it's a SS7 file. There are the Layers MTP2 MTP3 and ISUP. My analysis depends on the ISUP Layer. Now... (0 Replies)
Discussion started by: thisismyname
0 Replies
arpsend(8)							    Containers								arpsend(8)

NAME
arpsend - send ARP requests SYNOPSIS
arpsend -D -e target_ip [ -e target_ip ...] [-c count] [-w timeout] interface arpsend -U -i source_ip [-c count] [-w timeout] interface DESCRIPTION
Utility arpsend sends ARP packets on device interface to detect or update neighbours' ARP caches with a given IP. COMMANDS
Run utility with one of the following commands: -D Send broadcast ARP request to detect neighbours with target_ip. You have to specify target_ip (-e option). -U Send broadcast ARP request to update neighbours' ARP caches with source_ip. You have to specify source_ip (-i option). OPTIONS
-c count Number of packets to send. Default is infinity. -w interval Interval between packets, in seconds. Default is 1 second. -i source_ip_address Set source IP address field in ARP packet. -e target_ip_address Set target IP address field in ARP packet. Note that you can specify -e option multiple times to detect many IP addresses in one utility call. EXIT STATUS
arpsend returns 0 upon successful execution. If something goes wrong, it returns an appropriate error code. 1 EXC_USAGE Usage error 2 EXC_SYSTEM System error 3 EXC_RECV ARP reply was received EXAMPLES
To send request on interface eth0 to detect any neighbour computers with IP 192.168.10.200: arpsend -D -e 192.168.10.200 eth0 To send request on interface eth0 to update neighbours' ARP caches with IP 192.168.10.200: arpsend -U -i 192.168.10.200 eth0 NOTES
Interface you use have to be arpable and not be loopback (i.e. /sbin/ip link show interface should show neither NOARP nor LOOPBACK flags in interface parameters). SEE ALSO
vzctl(8). LICENSE
Copyright (C) 2000-2011, Parallels, Inc. Licensed under GNU GPL. OpenVZ 28 Jun 2011 arpsend(8)
All times are GMT -4. The time now is 02:48 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy