Wireshark · Ethereal-dev: Re: [Ethereal-dev] Apparently NAI's Sniffer product does application response times :-)

[Ian Schorr <spamcontrol2@xxxxxxxxxxx>]

According to their docs in the latest release of Sniffer Pro (4.75 
SP3), and as best as I've been able to extract from NAI themselves:

To obtain "Application Response Time" for TCP-based protocols, they 
simply measure TCP ACK RTT.  For UDP-based protocols, they simply 
measure the time from the sending of a datagram in one direction, to 
the observation of a datagram in the oposite direction (which is, 
presumably, the response).

I've pointed out on numerous occasions that these statistics are 
meaningless, at least from a ART/SRT standpoint.

This, by the way, appears to have been true for at least the past three 
years.

Ian

On Oct 1, 2003, at 1:09 AM, Richard Sharpe wrote:

> Hi,
>
> The latest protocol analysis news from Laura Chappell (she worked on
> Lanalyzer, I think and does TCP/IP and other network training these 
> days)
> points out that NAI's Sniffer product has rudimentary application 
> response
> time support. This seems to take the form of measuring the time taken 
> for
> Acks to come back when HTTP requests are sent, or some such.
>
> I have sent Laura an email pointing out that Ethereal since about 
> 0.9.12
> has some pretty serious application level service response time stuff 
> in
> it.
>
> Regards
> -----
> Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org,
> sharpe[at]ethereal.com, http://www.richardsharpe.com
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev