Ethereal-users: Re: [ethereal-users] Problem with Absolute Date Function, plus advice on a Threa

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Tue, 18 Jul 2000 10:24:39 -0700
On Mon, Jul 17, 2000 at 10:00:30PM +0100, Alistair.McGlinchy@xxxxxxxxxxxxxxxxxxxxx wrote:
> The second part of this email is a request for advice on how to develop a
> thread analysis script based on the thethereal2csv.pl script. The above
> example serves as an example of problem I have. There are 4 HTTP GET's
> required to download www.zing.org's home page, yet as the TCP ports 1814 and
> 1815 are reused,

"Reused" in what sense?

Do you mean that there are only two TCP connections, which are
persistent connections, so that each TCP connection is used for two HTTP
GETs?

If so, then:

> this script returns only two. Is it more "correct" to report two threads
> or four?

...it depends on what you mean by "thread".

If the goal is to report information about each HTTP *transaction*, it's
more correct to report four threads, if by "report four threads" you
mean "give four lines of address/port/frame numbers/time/etc.
information".  If the goal is to report information about each HTTP
*connection*, it's more correct to report two threads.

If by "reused" you mean that the port numbers are reused for *new*
connections, then, in either of the two cases I listed in the previous
paragraph, it's more correct to report four threads.