Ethereal-dev: Re: [Ethereal-dev] IO Stat

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Michael Tuexen <Michael.Tuexen@xxxxxxxxxxxxxxxxx>
Date: Sun, 7 Mar 2004 20:48:08 +0100
Yes, of couse.

- have some TCP traffic sniffed.
- Select Statistics->IO_Graph
- Click the the area 'Y Axis' in Unit and select Advanced
- type in Filter tcp&&ip.len
- type in calc ip.len
- select Sum
- Click on Graph.

The point which I do not get is why do I have to write
tcp&&ip.len when I want to filter all TCP Segments. All
of them have the ip.len field, except you do not run TCP
on top of IP, which i have not seen.

Best regards
Michael

On Mar 7, 2004, at 6:35 PM, Richard Sharpe wrote:

On Sun, 7 Mar 2004, Michael Tuexen wrote:

I was  using ethereal. I do not understand why I have
to provide two filters, one is a substring of the other.

Sure, but can you tell me the sequence of actions where this is needed?

Best regards
Michael


On Mar 7, 2004, at 12:28 AM, Richard Sharpe wrote:

On Thu, 26 Feb 2004, Ronnie Sahlberg wrote:

Use "tcp&&ip.len" as the filter and use "ip.len" as the field.

the field variable must be part of the filter string

Ummm, what exactly does that mean? Is this with Ethereal or Tethereal?

----- Original Message -----
From: "Michael Tuexen"
Sent: Thursday, February 26, 2004 2:37 AM
Subject: [Ethereal-dev] IO Stat


Dear all,

how do I use the IO stat advanced stuff to plot the sum of ip.len for
all
packets containing tcp. I tried to use tcp as a filter and ip.len as
the
field, but this does not work.

Thank you very much for your help.

Best regards
Michael

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev


--
Regards
-----
Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev


_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev


--
Regards
-----
Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev