Wireshark-users: Re: [Wireshark-users] [Wireshark-dev] packet statistics screen

From: "Aamer Akhter" <aakhter@xxxxxxxxx>
Date: Wed, 31 Jan 2007 14:54:15 -0500

Thanks Ian,

The IO Graphs are pretty cool. In a graphical/manual sense they are
what I'm looking for.

But I've got several hundred sets of data I need to analyze, so a tool
that can tell me the max pps/bit rate with a selectable resolution
would be really cool. Perhaps there is a way to add it into the
current stats?

On 1/31/07, Ian Schorr <ian.schorr@xxxxxxxxx> wrote:

Copying wireshark-users because that's the appropriate mailing list for your
question.

Have you tried using a time-based filter?

For example, you could try a filter like:

frame.time_relative > 60 && frame.time_relative <= 120

...to just get results for frames that showed up in the second minute of the
trace you're looking at.  Or you can filter on specific date/timestamps (see
the "frame.time" filter).  When you look at Statistics->Summary, look at the
statistics for "displayed" - those are stats for packets that match your
filter ( i.e. the specific time range you specified).

You might also want to look at the Statistics->IO Graphs feature, which is
fairly powerful.

-Ian



On 1/31/07, Aamer Akhter <aakhter@xxxxxxxxx> wrote:
>
> Hello,
>
> I'm looking at the ethereal screen in Statistics->Summary and was
> wondering if there is a way to calculate the highest pps and bitrate
> within a 1 min window. Right now, the stats seem to be over the entire
> length of the file...
>
> Any other tools that might do this?
>
> --
> Aamer Akhter / aakhter@xxxxxxxxx
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev
>

--
Aamer Akhter / aakhter@xxxxxxxxx