Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Add my signature

Tcptrace

Tcptrace is a tool to analyze TCP (and now, also UDP) sessions captured with TcpDump. It provides a lot of different kinds of statistics and information, a lot of which is useful in diagnosing problems with TCP sessions. It also supports various graphing options.

While the standalone version of tcptrace is rarely used these days, the basic approach and much of its functionality lives on as part of toolsets such as WireShark.

For a good explanation of tcptrace-style graphs and how to use them, check out Stuart Cheshire's (Apple) section of a WWDC (World Wide Developer Conference) 2015 presentation about what a difference ECN and CoDel make for the behavior of TCP bulk transfers.

Example usage

This shows the sessions in a tcpdump log:

...

-- Main.PekkaSavola - 26 Oct 2006
-- SimonLeinen - 27 Oct 2021