On Mon, Jan 28, 2008 at 02:01:30PM +0100, stefan@xxxxxxxxxxx wrote:
>
> Hello everybody,
> I am searching for a way to display the maximum bytes per second
> from a particular capture file. The summary shows only an average
> value.
> What I want is basically what the IO graphs show but without graphs
> :)
> Google was not very helpful yet. Maybe I just used the wrong
> keywords
> I hope that someone can help me.
Well, very recently the io-graphs have been extended with an export
possibility which will give you the data on which the graph was
based.
Try a development build from http://www.wireshark.org/download/automated/
Or...
You could do something like this if you are using a linux/unix box
(or cygwin on your windows box):
tshark -r test.cap -T fields -e frame.time -e frame.len |\
sed -e 's/\..*\t/\t/' |\
awk -F"\t" '$1==last {sum += $2; next} {printf("%s %8d bytes/s (%6.2f Mbit/s)\n",last,sum,sum*8/1024/1024);last=$1;sum=$2}'
Which will give you something like:
0 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:28 106 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:29 120 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:30 106 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:31 226 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:32 230 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:33 13147 bytes/s ( 0.10 Mbit/s)
Jan 28, 2008 14:33:34 14587 bytes/s ( 0.11 Mbit/s)
Jan 28, 2008 14:33:35 520 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:36 60 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:37 1058 bytes/s ( 0.01 Mbit/s)
Jan 28, 2008 14:33:38 6892 bytes/s ( 0.05 Mbit/s)
Jan 28, 2008 14:33:39 2389 bytes/s ( 0.02 Mbit/s)
Jan 28, 2008 14:33:40 37303 bytes/s ( 0.28 Mbit/s)
Jan 28, 2008 14:33:41 44661 bytes/s ( 0.34 Mbit/s)
Jan 28, 2008 14:33:42 22237 bytes/s ( 0.17 Mbit/s)
Jan 28, 2008 14:33:43 25220 bytes/s ( 0.19 Mbit/s)
Jan 28, 2008 14:33:44 8789 bytes/s ( 0.07 Mbit/s)
Jan 28, 2008 14:33:45 20758 bytes/s ( 0.16 Mbit/s)
Jan 28, 2008 14:33:46 64181 bytes/s ( 0.49 Mbit/s)
Jan 28, 2008 14:33:47 82567 bytes/s ( 0.63 Mbit/s)
Jan 28, 2008 14:33:48 32618 bytes/s ( 0.25 Mbit/s)
Jan 28, 2008 14:33:49 10061 bytes/s ( 0.08 Mbit/s)
Jan 28, 2008 14:33:50 2504 bytes/s ( 0.02 Mbit/s)
Jan 28, 2008 14:33:51 16472 bytes/s ( 0.13 Mbit/s)
Jan 28, 2008 14:33:52 180 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:53 180 bytes/s ( 0.00 Mbit/s)
Jan 28, 2008 14:33:54 12705 bytes/s ( 0.10 Mbit/s)
Jan 28, 2008 14:33:55 16835 bytes/s ( 0.13 Mbit/s)
Jan 28, 2008 14:33:56 2612 bytes/s ( 0.02 Mbit/s)
Jan 28, 2008 14:33:57 123637 bytes/s ( 0.94 Mbit/s)
Jan 28, 2008 14:33:58 155985 bytes/s ( 1.19 Mbit/s)
Jan 28, 2008 14:33:59 175501 bytes/s ( 1.34 Mbit/s)
Jan 28, 2008 14:34:00 199309 bytes/s ( 1.52 Mbit/s)
Jan 28, 2008 14:34:01 167380 bytes/s ( 1.28 Mbit/s)
Jan 28, 2008 14:34:02 60 bytes/s ( 0.00 Mbit/s)
I hope this helps,
Cheers,
Sake
