[Alistair.McGlinchy@xxxxxxxxxxxxxxxxxxxxx]

Eduard

I wanted something similar to yourself and had slow but satisfactory results
munging the output of tetheral -V. 

You can see the code I posted via 
http://www.ethereal.com/lists/ethereal-users/200204/msg00109.html

There's an interesting follow-up by Guy Harris about a possible alternative
syntax to the verbose output. I've got my fingers crossed that this
suggestion will eventually be implimented. 

HTH 

Alistair
> ----------------------------------------------------------------------
> Alistair McGlinchy,           alistair.mcglinchy@xxxxxxxxxxxxxxxxxxxxx
> Sizing and Performance, Central IT,   ext. 5012,   ph +44 20 7268-5012
> Marks and Spencer, 3 Longwalk Rd, Stockley Park, Uxbridge UB11 1AW, UK 
> 
> -----Original Message-----
> From:	Eduard Siemens [SMTP:siemens@xxxxxxxxxxxxxxxxxxx]
> Sent:	Tuesday, May 28, 2002 10:56 AM
> To:	ethereal-users@xxxxxxxxxxxx
> Subject:	[Ethereal-users] switching off the dissection of protocolls
> 
> hello folks, 
> I'm building flow statistics of an interface (about 5 mio and more packets
> in the sample)
> For that I capture flows on a interface with ethereal (v. 0.8.19 on a
> linux box).
> After that I parse the output with tethereal, put the output to a file and
> count statistics with a perl script.
> The problem - I need statistics divided by transport protocolls (i.e UDP,
> TCP, ICMP), not by applicaiton.
> when I open the capture file with ethereal, I can select protocolls, wo be
> dissected, byt how I can save this selection for using them in batch mode
> with thethereal (in clear text I don't want to see pckt 1 TCP, pckt 2
> HTTP, but bckt 2 is TCP either).
> 
> regards, 
Eduard
> --
> Dipl.-Ing. Eduard Siemens
> Lehrgebiet Rechnernetze und Verteilte Systeme
> Universität Hannover
> Tel. 0511-762-9036
> Fax 0511-762-3003
> 
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users


-----------------------------------------------------------------------


Registered Office:
Marks & Spencer p.l.c
Michael House, Baker Street,
London, W1U 8EP
Registered No. 214436 in England and Wales.

Telephone (020) 7935 4422 
Facsimile (020) 7487 2670

www.marksandspencer.com

Please note that electronic mail may be monitored.

This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.

The registered office of Marks and Spencer Financial Services Limited, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB.