Ethereal-users: [Ethereal-users] switching off the dissection of protocolls

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Eduard Siemens" <siemens@xxxxxxxxxxxxxxxxxxx>
Date: Tue, 28 May 2002 11:56:06 +0200
hello folks, 
I'm building flow statistics of an interface (about 5 mio and more packets in the sample)
For that I capture flows on a interface with ethereal (v. 0.8.19 on a linux box).
After that I parse the output with tethereal, put the output to a file and count statistics with a perl script.
The problem - I need statistics divided by transport protocolls (i.e UDP, TCP, ICMP), not by applicaiton.
when I open the capture file with ethereal, I can select protocolls, wo be dissected, byt how I can save this selection for using them in batch mode with thethereal (in clear text I don't want to see pckt 1 TCP, pckt 2 HTTP, but bckt 2 is TCP either).

regards, 
Eduard
--
Dipl.-Ing. Eduard Siemens
Lehrgebiet Rechnernetze und Verteilte Systeme
Universität Hannover
Tel. 0511-762-9036
Fax 0511-762-3003