117680Spst$6 ~ /^ack/ && $5 !~ /[SFR]/ { 217680Spst # given a tcpdump ftp trace, output one line for each ack 317680Spst # in the form 417680Spst # <ack time> <seq no> 517680Spst # where <ack time> is the time packet was acked (in seconds with 617680Spst # zero at time of first packet) and <seq no> is the tcp sequence 717680Spst # number of the ack divided by 1024 (i.e., Kbytes acked). 817680Spst # 917680Spst # convert time to seconds 1017680Spst n = split ($1,t,":") 1117680Spst tim = t[1]*3600 + t[2]*60 + t[3] 1217680Spst if (! tzero) { 1317680Spst tzero = tim 1417680Spst OFS = "\t" 1517680Spst } 1617680Spst # get packet sequence number 1717680Spst printf "%7.2f\t%g\n", tim-tzero, $7/1024 1817680Spst } 19