Easiest way to measure is to simply use my UDP listener (link) with the --raw option and redirect to a file.
wfudplistener --raw >> /var/tmp/someFileName.txt
Let it run for an hour or two and see how big the file gets, and do the simple math. This isn’t rocket science.
You can use the --limit
and --exclude
flags to include/exclude only the observation types you want, but personally I’d just take the file above grep for certain types one by one from a certain period’s capture.
grep rapid_wind /var/tmp/someFileName.txt | wc