How to use tshark to generate statistics about RPC calls?

Environment

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 7
• NFSv3

Issue

• How can tshark be used to generate RPC calls statistics from a network traffic dump?
• Is there a way to determine the latency of RPC calls such as NFSv3 operations using a packet capture created by tcpdump?

Resolution

• The tshark command line tool can be used to read a NFSv3 packet capture and generate RPC procedure statistics, including the number of calls and service response time (minimum, maximum, average and sum):

$ tshark -r repro.pcap  -q -z rpc,srt,100003,3
===================================================================
RPC SRT Statistics:
Filter: nfs.procedure_v3
Index  Procedure              Calls    Min SRT    Max SRT    Avg SRT    Sum SRT
    1  GETATTR                  4625   0.000001   0.015859   0.000259   1.195667
    2  SETATTR                   161   0.000140   0.090545   0.003800   0.611782
    3  LOOKUP                    504   0.000016   0.027399   0.000177   0.089194
    4  ACCESS                   1673   0.000028   0.218323   0.000388   0.648851
    6  READ                       11   0.000114   0.005527   0.001065   0.011715
    7  WRITE                     133   0.000299   0.035778   0.001773   0.235828
    8  CREATE                     17   0.000606   0.001056   0.000790   0.013437
    9  MKDIR                       1   0.000863   0.000863   0.000863   0.000863
   12  REMOVE                     18   0.000785   0.085327   0.010320   0.185758
   16  READDIR                    49   0.000230   0.001157   0.000398   0.019503
   17  READDIRPLUS                75   0.000334   0.066397   0.008558   0.641837
   18  FSSTAT                  25719   0.000204   0.200965   0.001023  26.321510
   21  COMMIT                      3   0.001137   0.014260   0.006048   0.018144
==================================================================

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.