Ethereal-users: RE: [Ethereal-users] selective Stats?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Francisco Alcoba (TS/EEM)" <francisco.alcoba@xxxxxxxxxxxx>
Date: Fri, 4 Feb 2005 07:54:05 +0100
>Is there a means to examine or graph a selected byte in a packet?
>Essentially, there is a byte in the packet that I would like to monitor from packet to packet.  >If I could graph the value of the byte over time, that would be perfect

Not that I know of. If you select "advanced" in the "Y Axis" section of "Statistics", "IO Graphs", you can ask for a graph that takes as input values of fields in the decoding; but AFAIK it cannot be used with byte positions; i.e. you can do that on tcp.srcport, but not on "byte 4 of the packet".

It should be easy to write a script that parses the output of tethereal -x to extract one byte of each packet and output the result to a file, which you can later process with any spreadsheet.