How to obtain RTT in Bro?

Zeek
1

How to obtain RTT in Bro?

2

hi
i want obtain RTT for establishment phase for tcp connections
i.e. obtain time between send SYN and receive SYN-ACK
i look at policy/remote-ping.bro and run on pacap file
but i not receive no output and i not understand its
note:
1.i use bro-ids version :1.2
2.i am working offline on pcap tace files for analysis network

please help me

3

i look at policy/remote-ping.bro and run on pacap file

Please do more research before posting to the mailing list. If you read
the comments at the top of policy/remote-ping.bro, you'll see it's for use
between multiple Bro's that are communicating with one another, and has
nothing to do with measuring RTT in traces. If you searched on /RTT/ in
the Bro sources & scripts you'll see there's no mention of it - Bro does
not compute this value.

    Vern