[Gerald Combs <gerald@xxxxxxxxxxxx>]

bejay wrote:

> Is there a way to save the 'Statistics---->Protocol Hierarchy" into a
> text file or something? whether under
> Unix or Windows.

Not from the GUI (at the present time, at least).  You can do this with
tethereal by using the "-z io,phs" flag.  For example,

     tethereal -z io,phs -r /path/to/a/capture.pcap -R "not frame"

might print something like

===================================================================
Protocol Hierarchy Statistics
Filter: frame

frame                                    frames:598 bytes:202616
  eth                                    frames:598 bytes:202616
    ip                                   frames:571 bytes:200747
      tcp                                frames:569 bytes:200400
        ssh                              frames:223 bytes:26134
        ssl                              frames:65 bytes:14359
          unreassembled                  frames:5 bytes:7555
        smtp                             frames:8 bytes:2743
        http                             frames:138 bytes:149390
          data-text-lines                frames:3 bytes:3647
          image-gif                      frames:2 bytes:2077
          image-jfif                     frames:28 bytes:42392
          media                          frames:1 bytes:1291
      udp                                frames:2 bytes:347
        dns                              frames:2 bytes:347
    llc                                  frames:27 bytes:1869
      stp                                frames:26 bytes:1352
      cdp                                frames:1 bytes:517
===================================================================

The "not frame" read filter keeps the one-line packet summary
information from being displayed.