Ethereal-users: Re: [Ethereal-users] Can Ethereal output number of files in a session?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 16 Mar 2006 09:58:31 -0800
Mayur Desai wrote:
Thats not what I really want. That just lists the size and time of the "capture files", not files captured. I want to recreate the times and sizes of files that were transmitted and captured...for example, of the 10,000 packets in a capture file, 300 make up file X, another 1000 make up file Y, and so on.. I want to be able to go through the capture file and create a list that looks like

file X  540k  2:30:12.23
file Y  894k  2:34:12.23

There's nothing in Ethereal to do that.

At what protocol layer is a "file" defined? There's no such notion at the TCP layer; it'd have to be at the NFS/SMB/HTTP/FTP/etc. layer.