[Bro] How to obtain RTT in Bro?

[hossein talebi]

hi
i want obtain RTT for establishment phase for tcp connections
i.e. obtain time between send SYN and receive SYN-ACK
i look at policy/remote-ping.bro and run on pacap file
but i not receive no output and i not understand its
note:
1.i use bro-ids version :1.2
2.i am working offline on pcap tace files for analysis network

please help me

On Mon, Nov 3, 2008 at 11:01 PM, rmkml <rmkml at free.fr> wrote:

> hi hossein,
> what RTT is for you please ?
> it is Round Tripe Time ?
> maybe found on:
>  bro-1.4/src/RemoteSerializer.cc
>  bro-1.4/policy/remote-ping.bro
> Regards
> Rmkml
> Crusoe-Researches.com
>
> On Sun, 2 Nov 2008, hossein talebi wrote:
>
> Date: Sun, 2 Nov 2008 10:13:37 +0330
>> From: hossein talebi <talebihossain at gmail.com>
>> To: Bro-ids <bro at bro-ids.org>
>> Subject: [Bro] How to obtain RTT in Bro?
>>
>> How to obtain RTT in Bro?
>>
>> --
>> Talebi Mazraeh Shahi Hossein
>>
>>
>>


-- 
Talebi Mazraeh Shahi Hossein
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20081104/623539f1/attachment.html