Comment # 2
on bug 8647
from Stuart Kendrick
Oops, yes, that would make things easier.
Attached is a capture of a sample file SMB file copy (a different one from the
one I used for the original post): file-copy.pcap I'm claiming that the
output from the following two 'tshark' commands should be different.
C:\Temp>tshark -r file-copy.pcap -Y tcp.srcport==445 -qz
io,stat,0,SUM(tcp.time_
delta)tcp.time_delta
================================================
| IO Statistics |
| |
| Interval size: 51.8 secs (dur) |
| Col 1: Frames and bytes |
| 2: SUM(tcp.time_delta)tcp.time_delta |
|----------------------------------------------|
| |1 |2 |
| Interval | Frames | Bytes | SUM |
|----------------------------------------------|
| 0.0 <> 51.8 | 18972 | 26654645 | 51.831445 |
================================================
C:\Temp>tshark -r file-copy.pcap -Y tcp.dstport==445 -qz
io,stat,0,SUM(tcp.time_
delta)tcp.time_delta
================================================
| IO Statistics |
| |
| Interval size: 51.8 secs (dur) |
| Col 1: Frames and bytes |
| 2: SUM(tcp.time_delta)tcp.time_delta |
|----------------------------------------------|
| |1 |2 |
| Interval | Frames | Bytes | SUM |
|----------------------------------------------|
| 0.0 <> 51.8 | 18972 | 26654645 | 51.831445 |
================================================
C:\Temp>
You are receiving this mail because:
- You are watching all bug changes.