Ethereal-dev: Re: [Ethereal-dev] DCERPC throughput via UDP?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 12 Mar 2003 00:16:22 -0800
On Tue, Mar 11, 2003 at 09:24:41PM -0800, Jaime Fournier wrote:
> Had to go hunt down the trace I had.
> The option for TCP Stream Analysis -> Throughput
> Graph.

OK, that's actually TCP throughput, rather than the throughput (for
example, read/write throughput) for the protocol running atop TCP.  It
includes all the TCP payload.

> Can that be easily done for UDP?

Well, assuming that a UDP stream could be identified (based on, for
example, source and destination ports and addresses, although with UDP
there's no guarantee that replies come from the same IP address or port
as the address and port to which the matching request was sent), yes, it
could be done.  It would, of course, not be DCE RPC throughput, or
AFS/RX throughput, it'd be raw UDP throughput.