[George Sanderson <george@xxxxxxxxxxx>]

I took a peak at Ethereal and have some suggestions for the summary output
format.

1) Place a one line header at the beginning of the print output that
provides the program name, version, output format, and the date time of the
capture.
   
   This could be used to differentiate future changes in the output format
   and provide a time reference if the time output only is in seconds.

2) Add a column for the packet size.

   This would enable utilization (bytes/seconds) to be calculated.

3) Always include the source and destination layer 3 socket addresses,
   if they are available.

   This would enable other methods to cross check the protocol type and
   to identify client application port allocation practices.


+================================+
| George Sanderson <george@xxxxxxxxxxx>
| http://www.xorgate.com
+================================+