Ethereal-dev: Re: [Ethereal-dev] New feature : graphical io-stat, input wanted

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Pia Sahlberg" <piabar@xxxxxxxxxxx>
Date: Thu, 14 Nov 2002 22:41:46 +0000
Jamie wrote:

Anything applicable to batch type operations on

tethereal?


use CVS version of ethereal.

man tethereal
look for io,stat


try

tethereal -n -r foo.cap  -z io,stat,1
for bytecount and framecount stats for ALL packets calculated in
1 second measurement intervals.

try

tethereal -n -r foo.cap -z "io,stat,5,tcp,arp,ip.addr==1.2.3.4"
to create framecount/bytecount stats calculated over 5 second measurement intervals and present it in 3 different columns: 
1,   stat for all TCP packets
2,   stat for all ARP packets
3,   stat for all pakcets to/from ip address 1.2.3.4
It will print a table with one line for each measurement interval how many frames and bytes were matching each of the filters. 
Useful for scripting and it should be easy to feed the output into perl or
excel or something.



_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus