[kai-ethereal-trap@xxxxxxxx]

Greetings.

I've missed this for some time: is there a way to get relative,
rather than (bulky, virtually unreadable by a human) absolute
TCP sequence numbers in dumps from (t)ethereal? (in particular
tethereal, as screen space is always at a premium with vt100
terms). tcpdump does this by default, it can be switched to
absolute seq. numbers with the -S flag, but who'd ever do that,
other than to observe int32 roll-over problems?

I find myself in situations where I quickly want to determine
size, sequence and events like out-of-sequence/retransmissions
or 'window full' situations for a given TCP connection: nothing
no ethereal options seems to fit, and tcpdump doesn't give me
enough protocol detail otherwise.

Is this possible or a planned feature? (it doesn't seem to be
in the "wishlist")

Thanks,
bye,Kai

--
"Just say No" to Spam                                     Kai Schlichting
New York, Palo Alto, You name it             Sophisticated Technical Peon
Kai's SpamShield <tm> is FREE!                  http://www.SpamShield.org
|                                                                       |
LeasedLines-FrameRelay-IPLs-ISDN-PPP-Cisco-Consulting-VoiceFax-Data-Muxes
WorldWideWebAnything-Intranets-NetAdmin-UnixAdmin-Security-ReallyHardMath