ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 8981] New: IO graph/advanced, count fields (*) based on cr

Date: Fri, 26 Jul 2013 12:11:23 +0000
Bug ID 8981
Summary IO graph/advanced, count fields (*) based on criteria
Classification Unclassified
Product Wireshark
Version 1.10.0
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Enhancement
Priority Low
Component Wireshark
Assignee [email protected]
Reporter [email protected]

Build Information:

--
When drawing IO graphs for frames that have multiple messages inside one
captured frame (Diameter commands in my case) it would be helpful to have
ability to use "count fields (*)" based on some criteria.

For example, in one captured frame I can have several Diameter messages. If I
want to draw graph that will for example count only Diameter CCR messages, this
is not possible at the moment.

By applying to the filter "diameter.cmd.code == 272" will select all frames
where at least one message with this criteria is found. Now going with "count
fields(*)" I can say that wire shark should count how many times for example
some filed in filtered frames occur ("diameter.cmd.code"), but I'm not able to
say which criteria has to be fulfilled (e.g. "diameter.cmd.code == 272")

In my example, where there are multiple Diameter messages inside single frame,
I'm not able to count only diameter messages where filed corresponds to certain
value.

For example

"Count fields (filter)" : "diameter.hopbyhopid = 0x04341243"


You are receiving this mail because:
  • You are watching all bug changes.