Thank you for these efforts. As a user of ethereal, not a programmer,
I really appreciate anything that can be done or is attempted to be
done.
Thank you all for your efforts
Kevin Mason
On Thursday, Mar 27, 2003, at 05:03 US/Eastern, Ronnie Sahlberg wrote:
From: "Kevin"
Sent: Wednesday, March 19, 2003 2:52 AM
Subject: [Ethereal-dev] Feature request on TCP Analysis Flags
Using Ethereal 0.9.11 on Freebsd 4.8 Release.
In the summary screen, when a TCP Duplicate ACK is found, can the
frame
number that is duplicated be displayed? Also in the protocol detail
display?
Thanks for the suggestion on how to improve ethereal.
I have tested and checked in a patch that will make ethereal display
in the
summary pane
"[ TCP Dup ACK <frame>#<number> ]"
both which was the original ACK and also the Dup ACK number.
The first DupACK to the ACK in frame n will be displayed as
...n:1...
the second one
...n:2...
etc.
The frame the dup ack is a duplicate and the dup ack number is also
awailable in the
tree pane with display filterable fields.
thanks for suggesting a very useful enhancement to ethereal.
i hope you will find this enhancement useful.
If possible, all the TCP Analysis fields should reference the frame
that caused the flag to be set. The Retransmission would be another
big help if it displayed these values.
Retransmissions are more difficult, mainly due to the way it works and
what
state the tcp analysis code
keeps between frames.
It would certainly be possible to add this feature which would be
useful
without too much
brain surgery of the tcp analysis code.
I, or someone else, might look into this soon. If no patch is
implemented
within a few weeks I might have simply forgotten your request, then
just
poke me again and i will look at it.
Displaying which frame something is a retransmission of is also tricky
because the original frame might not even exist in the capture file at
all.
It would be very useful if retransmitted frames also displayed the time
delta from the original frame, or estimate of when the original frame
should
have been seen (like time delta either from the original, if seen, or
from
the first dup ack this retransmission referres to.
I plan to do this in some unknown future.
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev