Changes for version 0.15

  • TCP segments with header lengths smaller than 20 bytes are no longer included in the tally for 'Total ACKs'. In general, it may be interesting to count the number of TCP segments with header lengths smaller than the required minimum (20 bytes). However, in a recent study I noticed that out of 22,592,477,487 segments with the ACK bit set, only 158 had a header smaller than 20 bytes. It is not clear whether these segments belonged to protocols masquerading as TCP, or if they where erroneous TCP segments. Anyhow, by now ignoring such segments, the following holds always:
    • Total ACK = Cumulative ACKs + Options ACKs
  • Minor code modifications and cleanup
  • Distribution cleanup based on suggestions from "Writing Perl Modules for CPAN" by Sam Tregar (Apress 2002)
  • POD updates and editorial changes

Documentation

Process a single TSH trace using Net::Traces::TSH
Convert a single TSH trace to tcpdump text format
Convert a single TSH trace to ns2 Traffic/Trace binary format
An annotated version of t/sample_output/sample.csv

Modules

Analyze IP traffic traces in TSH format