대용량 패킷 분석 #2 - capinfos

capinfos

 

tcpdstat와 중복되는 정보도 있기는 하지만 다른점이라면 Bytes/sec, bits/sec, PPS 등을 한 눈에 볼 수 있다는 점과 dump 파일에 대한 Hash 값을 알려준다.

 

$ sudo capinfos test.pcap

File name:          test.pcap
File type:           Wireshark/tcpdump/... - libpcap
File encapsulation:  Ethernet
Packet size limit:   file hdr: 65535 bytes
Number of packets:   831697
File size:           886591637 bytes
Data size:           873284461 bytes
Capture duration:    5575 seconds
Start time:          Mon Mar  4 12:56:19 2013
End time:            Mon Mar  4 14:29:15 2013
Data byte rate:      156631.60 bytes/sec
Data bit rate:       1253052.78 bits/sec
Average packet size: 1050.00 bytes
Average packet rate: 149.17 packets/sec
SHA1:                ac682b6a85027ef311849f0fed22af1a1c8af0c1
RIPEMD160:           fa0293d5b52a609ce9eea33fa659cef6cd503fb9
MD5:                 8eddd9f63164d6a390b6d7e4b9dce37f
Strict time order:   False