Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] MEGACO - calculate packet retransmissions

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Fri, 23 Jul 2010 15:26:16 +0200

Hi,

Tshark the file, output whatever you need, then script your statistics.

The Wireshark site provides several presentations (from SharkFest et al.) about this.

Thanks,
Jaap

On Fri, 23 Jul 2010 15:40:21 +0300, Manolis Katsidoniotis <manoska@xxxxxxxxx> wrote:

Ssending again because I'm not sure if the 1st one made it

Hello


I have an H.248 (MEGACO) trace capturing traffic between a controller and a remotelly located gateway.
The sniffer is located at the controller side and contains about 200.000 packets.

It looks like some of them are retransmissions.
Wireshark does not recognise the retransmission (no indication in the packet details) so the packet is displayed as normal.
The way to recognise it is that 2 frames sent within a few seconds interval are identical (also same transaction id).

I would like to count these retransmissions but I can find no obvious way through filtering or statistics excluding of course counting the packet one by one.

Any ideas anyone?

thanks
Manolis