nfslogsum - Summarize nfswatch log file
/usr/sbin/nfslogsum [-n] [-v] [logfile]
Directs nfslogsum to read only the first n entries in the
log file. This is useful for summarizing log files in
cumulative chunks. Produces a verbose summary of the log
The nfslogsum command summarizes log files produced by the
nfswatch program. By default the log file nfswatch.log is
summarized; an alternate log file can be specified on the
Each nfswatch log file may contain one or more log sessions,
each indicated by a header which is printed when
logging is turned on. For each log session, nfslogsum tallies
up the interval packet totals and prints out a onepage
summary of the log session. Total packets and percentages
are tabulated for each category and displayed.
In addition to the summary information printed as
described above, a summary of how many calls to each NFS
procedure were made on each file system and individual
file will be printed. This summary information is divided
into three sections of six columns each. The columns are
headed by the names of the following NFS procedures: Does
nothing. This procedure is provided to allow server
response testing and timing. Gets the file attributes
(type, mode, number of links, owner's uid, owner's gid,
size, access, modification and change times, and others).
This procedure is used by the stat(2) system call, as well
as several others. Sets the file attributes (mode,
owner's uid, owner's gid, size in bytes, access and modification
times). This procedure is used by system calls
such as chmod(2), chown(2), and truncate(2). Gets the
file system root. This procedure is obsolete, and has been
replaced by a MOUNT protocol procedure. Looks up the file
name. This procedure is used to obtain an initial file
handle for use in current and future requests on that
file, and is used by many different system calls. Reads
from the symbolic link. This procedure is used by the
readlink system call and by the kernel. Reads data from
the file. This procedure is used by the read(2) system
call. Writes to the cache. Unused in the current NFS protocol
revision. Writes data to a file. This procedure is
used by the write(2) system call. Creates a file. This
procedure is used by the creat(2) and open(2) system
calls. Removes a file. This procedure is used by the
unlink(2) system call. Renames a file. This procedure is
used by the rename system call. Creates a link to the
file. This procedure is used by the link(2) system call.
Creates a symbolic link to the file. This procedure is
used by the symlink(2) system call. Creates a directory.
This procedure is used by the mkdir(2) system call.
Removes a directory. This procedure is used by the
rmdir(2) system call. Reads entries from a directory.
Generally only one READDIR call is needed per directory,
since a variable number of entries can be returned. Gets
file system attributes (transfer size, block size, blocks
in use, blocks free). This procedure is used by the
statfs(2) system call.
The nfslogsum utility is sensitive to the format of the
log file produced by nfswatch. Do not edit or change the
log file before using it as input to nfslogsum.
Commands: nfswatch(8), tcpdump(8)
Networking: bpf(7), packetfilter(7)
[ Back ]