Wireshark-users: Re: [Wireshark-users] IO Graphs - TCP Bytes in Flight

From: Martin Visser <martinvisser99@xxxxxxxxx>
Date: Wed, 31 Mar 2010 11:20:31 +1100
It doesn't make sense to SUM bytes_in_flight. Bytes_in_flight is a virtual field at a point in time, for every packet in the TCP stream. MAX or MIN do make sense.


Regards, Martin

MartinVisser99@xxxxxxxxx


On Wed, Mar 31, 2010 at 7:54 AM, Barry Constantine <Barry.Constantine@xxxxxxxx> wrote:

Hello,

 

I’ve used the Advanced IO graphing capabilities before and am not able to get the correct TCP In flight data chart to work.

 

This is what I am doing in IO graphs:

 

  1. Change Y Axis unit to Advanced.
  2. Filter = tcp.analysis.bytes_in_flight
  3. Calc to SUM of tcp.analysis.bytes_in_flight

 

The result is way off but the tcp.analysis.bytes_in_flight in the decodes looks correct.

 

Feel like I am missing something obvious but I checked myself by using “frame.len” in the above manner and this worked.

 

Thanks,

Barry

 

Principal Member of Technical Staff

 

JDSU Communication Test (formerly Acterna)

Emerging Markets and Technology Research        

One Milestone Center Court                             

Germantown, MD 20876                                        

(W) 240-404-2227                                               

(C) 301-325-7069

 


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe