Tool : Length Distribution Chart

Packet Length Distribution Chart

This tool is part of a series of utilities  meant to illustrate the use of the Unsniff Scripting API and to motivate you to write your own tools.

Length Distribution Chart Ever wonder about the sizes of packets that criss-cross your network ?
Using the Unsniff Scripting API combined with the power of Ruby - you can quickly create powerful scripts to see for yourself. We present a utility written using the Unsniff Scripting API which looks at captured data and creates a Packet Length Distribution chart. This tool demonstrates usage of the Unsniff Scripting API, Ruby,UnleashCharts, and Fox-Ruby.

Packet Length Distribution Chart

Quick Info

This tool demonstrates the following concepts

Using the Unsniff Scripting API  to loop over packets

Using the Fox-Ruby toolkit to create GUI programs

Using the free ruby charting library UnleashCharts to create bar charts

This Ruby script uses the Unsniff Scripting API to create a bar-chart that shows distribution of packet lengths. This utility is written in the Ruby scripting language, using the Fox-Ruby GUI toolkit, and the free UnleashCharts charting library.  

Packet Length Distribution Chart

This script opens a capture file and loops over all captured packets. Each packet is assigned to a bucket based on its length. The rest of the code deals with interfacing with the Fx-Ruby toolkit and the UnleashCharts library.

Download

How to run 

  1. Download the tool (lendist.rb) to a folder on your computer
  2. Download UnleashCharts.rb charting library to the same folder
  3. Execute the script on a capture file (see Usage below)

Usage:

lendist <capture-file-name>

capture-file-name : Capture file in Unsniff (*.usnf) format 

Example:

c:\RubyTest> lendist  MyLargeCapture.usnf