> On a more global note:
>
> One might say "why not just use 'tcpstream' on the captures?", except
> that:
What's tcpstream? Could you give me a URL?
> > > What I've got so far is limited to TCP stream analysis and is basically a
> > > partial reimplementation of tcptrace-style time-sequence, throughput and
> > > RTT graphs. It can do zooming in and out, crosshairs, a kind of "magnifying
> > > glass" where you temporarily magnify portion of graph, you can select
> > > packets in ethereal's packet list by clicking on segments on graph and so
> > > on.
>
> so, in fact, the graphing code does actually interact with the rest of
> Ethereal.
It would interact much more if I was able to figure out how to do it. ;-)
(Well, actually I didn't try that hard so far.) Right now, you can select
packets in packet list by clicking into the graph. I would like have the
opposite feature too - some kind of highlighting of the packet that is
highlighted in packet list. One thing that would be really useful is a
"dynamic" graph that would be drawn in real time during the capture. I'm
sure there's a lot of potential in having graphing incorporated in ethereal
core.
pvl