Ethereal-users: [Ethereal-users] [Q] tethereal stats

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Stef <stefmit@xxxxxxxxx>
Date: Tue, 31 Aug 2004 16:28:11 -0500
Could anybody help with an idea for a filter I could produce, to get
statitics on number of FTP jobs, on  any direction, per unit of time?
I have tried this (which gives me the number of SYN packets only, on
port 21):

# tethereal -i eth2 -z "io,stat,60,tcp&&tcp.port==21&&tcp.flags==0x02,\
COUNT(tcp.flags)tcp,flags&&tcp.port==21&&tcp.flags==0x02,\
AVG(tcp.flags)tcp.flags&&tcp.port==21&&tcp.flags==0x02,\
MIN(tcp.flags)tcp.flags&&tcp.port==21&&tcp.flags==0x02,\
MAX(tcp.flags)tcp.flags&&tcp.port==21&&tcp.flags==0x02"

but I have a feeling I am missing something. I get data, nonetheless,
but I wonder if it is correct. Or maybe it really is correct?!? Any
tethereal guru out there?!?

Thx,
Stef