Wireshark-users: Re: [Wireshark-users] IO Graphs - TCP Bytes in Flight

From: Martin Visser <martinvisser99@xxxxxxxxx>
Date: Wed, 31 Mar 2010 11:20:31 +1100
It doesn't make sense to SUM bytes_in_flight. Bytes_in_flight is a virtual field at a point in time, for every packet in the TCP stream. MAX or MIN do make sense.

Regards, Martin


On Wed, Mar 31, 2010 at 7:54 AM, Barry Constantine <Barry.Constantine@xxxxxxxx> wrote:



I’ve used the Advanced IO graphing capabilities before and am not able to get the correct TCP In flight data chart to work.


This is what I am doing in IO graphs:


  1. Change Y Axis unit to Advanced.
  2. Filter = tcp.analysis.bytes_in_flight
  3. Calc to SUM of tcp.analysis.bytes_in_flight


The result is way off but the tcp.analysis.bytes_in_flight in the decodes looks correct.


Feel like I am missing something obvious but I checked myself by using “frame.len” in the above manner and this worked.





Principal Member of Technical Staff


JDSU Communication Test (formerly Acterna)

Emerging Markets and Technology Research        

One Milestone Center Court                             

Germantown, MD 20876                                        

(W) 240-404-2227                                               

(C) 301-325-7069


Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users