Wireshark · Ethereal-users: [Ethereal-users] Protocol Hierarchy

["Surena K.D." <surenakd@xxxxxxxxxxx>]

Hi

I tried the FAQ and user guide and searched the list, but I could not find 
my answer. Attached is the protocol hierarchy from tools menu. I ran 
ethereal in "non-promisc" mode and then got a file with ftp. I shutdown all 
other applications so the tcp traffic is mostly for ftp transfer. The result 
is shown in attached file. The tcp protocol is 25% of all traffic but the 
sum of the categories under it is about 16.5%. I always get about 40% 
difference between the total tcp traffic and sum of the categories under it. 
I tested it under win2000 and Linux, but I got the same results. Also I 
thought maybe there is another application using tcp and I am not aware of 
it. So I tried getting big files, so the effect of those applications be 
small. But the result did not  change much. I want to know what causes such 
a large difference?

Thanx


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Attachment: hi.jpg
Description: image/pjpeg