14edb46e9SPaul Traina$6 ~ /^ack/ && $5 !~ /[SFR]/ { 24edb46e9SPaul Traina # given a tcpdump ftp trace, output one line for each ack 34edb46e9SPaul Traina # in the form 44edb46e9SPaul Traina # <ack time> <seq no> 54edb46e9SPaul Traina # where <ack time> is the time packet was acked (in seconds with 64edb46e9SPaul Traina # zero at time of first packet) and <seq no> is the tcp sequence 74edb46e9SPaul Traina # number of the ack divided by 1024 (i.e., Kbytes acked). 84edb46e9SPaul Traina # 94edb46e9SPaul Traina # convert time to seconds 104edb46e9SPaul Traina n = split ($1,t,":") 114edb46e9SPaul Traina tim = t[1]*3600 + t[2]*60 + t[3] 124edb46e9SPaul Traina if (! tzero) { 134edb46e9SPaul Traina tzero = tim 144edb46e9SPaul Traina OFS = "\t" 154edb46e9SPaul Traina } 164edb46e9SPaul Traina # get packet sequence number 174edb46e9SPaul Traina printf "%7.2f\t%g\n", tim-tzero, $7/1024 184edb46e9SPaul Traina } 19