#calulate total time of each connection #connections are started every I secs BEGIN { I=3000; syn_time=0; prev=0; k=0; total=0; segs=0} $2 - prev > I/2 { if (k>0) #print prev - syn_time; total+= prev - syn_time; syn_time=$2; k++ } $1=="r" && $5=="tcp" {segs++} {prev = $2} # {print "prev now" prev } #END {print prev-syn_time} END {total+= prev - syn_time; if (k>0) print total/k "\t" segs/k}