Argus provides direct support for reporting round trip delay
metrics as described in RFC
2681. For most strict request/response IP transactions,
such as DNS, Type-P-Round-trip-Delay metrics are generated by
default. When Argus is run using the '-R' option, Argus will generate
Type-P-Round-trip-Delay metrics for all Argus
flow types, when possible, i.e. whenever the reportable source and destination packet
counts equal to 1.
With all TCP flow reporting, the TCP handshake establishment round trip delay metrics are provided
by default. These number can be used to estimate RTT.