Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] tcp graphs vs. sctp graphs

From: Cristian Constantin <const.crist@xxxxxxxxxxxxxx>
Date: Mon, 12 Nov 2012 11:41:36 +0100
hi!

I am just a bit confused about the way the tcp graphs are presented to the user.
I am using debian/Version 1.6.5

1. tcp. if one selects (for example):

Statistics/TCP Stream Graph/Window Scaling Graph

from the main menu, one gets the graph from the perspective of the endpoint which is
represented by source ip address, source ip port of the frame containing the tcp segment 
selected in the main wireshark window, right?
for getting the graph for the other endpoint, I have to close the current graph and select a tcp
segment with the source ip/port of the other endpoint and select again:

Statistics/TCP Stream Graph/Window Scaling Graph

wouldn't have been more intuitive and easier to use (from the user perspective) changing the
graph dynamically when another source endpoint is selected in the main window? or to present
such a choice in the tcp graph windows?

2. sctp. I find the way the graphs are presented to the user much more intuitive and easier to use
(i.e. _explicitly_ per endpoint of the association). for example, choosing from the main menu:

Telephony/SCTP/Show All Associations...

then selecting the association from the popped-up window and then requesting the
graphs per _endpoint_. 

(i.e. "Analyse" button in the "SCTP Associations" window, then choosing the endpoint tab in the
"SCTP Analyse Association" window and then pressing one of the graph buttons)

cristian