1$6 !~ /^ack/ && $5 !~ /[SFR]/ { 2 # given a tcpdump ftp trace, output one line for each send 3 # in the form 4 # <send time> <seq no> 5 # where <send time> is the time packet was sent (in seconds with 6 # zero at time of first packet) and <seq no> is the tcp sequence 7 # number of the packet divided by 1024 (i.e., Kbytes sent). 8 # 9 # convert time to seconds 10 n = split ($1,t,":") 11 tim = t[1]*3600 + t[2]*60 + t[3] 12 if (! tzero) { 13 tzero = tim 14 OFS = "\t" 15 } 16 # get packet sequence number 17 i = index($6,":") 18 printf "%7.2f\t%g\n", tim-tzero, substr($6,1,i-1)/1024 19 } 20