tcptrace

tcptrace is a TCP dump file analysis tool written by Shawn Ostermann at Ohio University. It is NOT a packet capture program. It reads output dump files in the formats of several popular packet capturing programs: tcpdump, snoop, etherpeek, and netm

For each connection, it keeps track of elapsed time, bytes/segments sent and received, retransmissions, round trip times, window advertisements, throughput, etc.. Its output format ranges from Simple to Long to Very Detailed

Several examples of its use can be found in this list:

finger Just a quick connection
fast Several connections in the same file
sack A nice picture of SACKs working

It can also produce three different types of graphs, as follows:

Time Sequence Graph
This is the format that Tim Shepard started using at MIT some years ago. It shows segments sent and ACKs returned as a function of time.
Throughput
This format shows the instantaneous (averaged over a few segments) throughput of the connection as a function of time
Round Trip Times
This format shows the round trip times for the ACKs as a function of time

What's new in version 5?
The graphs produced are viewable only by Tim Shepard's wonderful xplot program, which you can find at ftp://mercury.lcs.mit.edu/pub/shep If you're lazy, there's a Sparc Solaris 2.5 xplot binary of version 0.90 sitting here along with its README file


A more complete description of the program's (admitedly complicated) arguments can he found on the tcptrace argument page


If you're interested in hearing about updates and etc, I'd be glad to put you on the tcptrace mailing list, just drop me a quick note via email.


Click Here to Download


There's a list of some of the people who have contributed to the program HERE .


For a list of who grabbed a copy of tcptrace, click HERE .
For a count of the sites that grabbed a copy of tcptrace, click HERE .


Shawn Ostermann
Last modified: Fri Dec 12 17:15:13 1997