接触fs那么久,有必要再记录一下。
上一篇介绍了fs拓扑描写叙述文件dot的格式,今天要介绍fs输出文件的格式。
举个样例,下面是d节点输出文件的一行记录,也就是一条流经过d的记录。
textexport d 1.035154 1.035154 1.175314 10.1.1.2:1001->10.5.0.1:2001 tcp 0x0 b:172.16.0.70 4 1722 FSA
当中每一个字段含义例如以下:
type of export (always textexport)
node name at which flow was observed (a)
sim time at which flow started
sim time at which flow ended
sim time at which flow record was written
source IP addr:source port->dest IPaddr:dest port
protocol
type of service (0x0)
identifier to indicate which interfacearrived on the node at which flow is observed (shows harpoon:172.16.0.1 toindicate that it arrived from a harpoon generator node, and the IP addressassigned to the interface on node a on which the traffic arrived)
number of packets in flow (5)
number of bytes in flow (4373)
TCP flags observed in flow (FIN | SYN | ACK)须要注意的是,第二第三个记录并非流的開始和结束时间,而是一个流经过d点时的開始和结束时间,那么假设想计算一个流的传输速度,就必须知道传输时间,但这个不能仅通过一个节点就能知道,须要对照開始节点和结束节点的记录,找到相应的流,然后计算时间差才干得出。下图为一个流吞吐量在600秒内的变化图。
能够看出,fs的吞吐量太不稳定了,拓扑中仅仅有一条流时波动居然这么大,因此假设是想利用fs计算流吞吐量的念头果断打消。