| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| README | 2013-03-21 | 2.2 kB | |
| netsar.doc | 2013-03-21 | 37.9 kB | |
| Totals: 2 Items | 40.0 kB | 0 |
3/20/2013
John Donnelly
This is netsar 1.0, a system call tracer for
reporting network activity at the syscall level per-process.
Simple startup:
netsar -f -n 1024 -C -o firefox.csv `which firefox`
records network statistics to csv file to import as a spread sheet (to graph).
To observe network statistics live, leave off the "-C -o" options,
and a summary of network activity will be reported every time a
network endpoint is closed to stdout:
5:42:20: Fhandle 109, FHFlags: Socket, Pid 10022, Task firefox
Syscalls: Socket: 1, Bind: 0, Connect: 1, Accept: 0 Listen: 0
Syscalls: Send: 0, Sendto 3, Sendmsg: 0, Recv: 5, Recvmsg: 0
TCP Total Sent: 1314, Small 3, Med 0, Large 0, Jumbo 0.
TCP Total Recv: 39859, Small 0, Med 1, Large 0, Jumbo 4.
TCP Transfer sizes
Sent Recv
512: 3 0
2048: 0 1
8196: 0 2
16384: 0 2
This summary shows socket w/ FH 108 sent 1314 bytes, received 39859 bytes,
in the sizes noted.
When netsar is terminated ( or the trace program terminates ) a
summary is printed:
syscall calls usecs/call seconds % time errors
------------ --------- ----------- --------- -------- ---------
recvfrom 50372 1 0.045833 52.78 40264
writev 10295 2 0.016094 18.53
write 4811 3 0.013195 15.19
read 5579 1 0.008268 9.52
close 248 5 0.001189 1.37
sendto 315 3 0.001025 1.18
connect 217 4 0.000938 1.08 94
getsockname 302 0 0.000133 0.15
socket 144 0 0.000056 0.06
setsockopt 95 0 0.000041 0.05
recvmsg 57 1 0.000034 0.04
getsockopt 84 0 0.000034 0.04
bind 19 0 0.000000 0.00
------------ --------- ----------- --------- -------- ---------
