> I am displaying summary of my capture files. In there, there is a TCP
> protocol (44.12 %). and underneath that, are protocols that use TCP(FTP,
> HTTP, etc). After adding those protocols % all together, why the sum are
> not equal to 44.12 % ?
TCP packets with no data in them will not be recognised as higher level
protocols. Such packets are mainly sent to acknowledge data sent in the
other direction, (ACK flag) but also control the set-up and closure of the
stream (SYN, FIN, RST flags.)
--
Richard Urwin, Software Design Engineer
Schenck Test Automation
Braemar Court, 1311b Melton Road, Syston, UK.
rurwin@xxxxxxxxxxxxx
________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________