Wireshark · Ethereal-dev: Re: [Ethereal-dev] Interest check: state/event graphs?

[Mike Duigou <ethereal@xxxxxxxxxx>]

S. Tyler McHenry wrote:
> I'm working on a customization of Ethereal (the majority of which is probably 
> uninteresting to outsiders), but I've come across the need to do state 
> graphing. That is, instead of graphing the packets received versus time, I 
> graph the state of the hosts the can be inferred from the packets over time. 
> The result will be a series of horizontal lines, one for each node, whose 
> changes in height will represent changes in state of the hosts. 
>
> I'm wondering first of all if any such graphing utility already exists in 
> Ethereal (all I've been able to find are packet graphs), and if not would a 
> generic version of this be a useful addition for any existing dissectors?

Depending upon how the state changes are described I might be interested 
in making use of your proposed feature for the JXTA dissector.

Right now the difficulty would be that it's not possible to filter on 
the contents of most JXTA protocol messages because they are XML based 
but embedded within framing. Ethereal can't currently filter for 
protocol fields that are contained within a sub-dissection.

Mike