I took a peak at Ethereal and have some suggestions for the summary output format. 1) Place a one line header at the beginning of the print output that provides the program name, version, output format, and the date time of the capture. This could be used to differentiate future changes in the output format and provide a time reference if the time output only is in seconds. 2) Add a column for the packet size. This would enable utilization (bytes/seconds) to be calculated. 3) Always include the source and destination layer 3 socket addresses, if they are available. This would enable other methods to cross check the protocol type and to identify client application port allocation practices. +================================+ | George Sanderson <george@xxxxxxxxxxx> | http://www.xorgate.com +================================+
Powered by MHonArc 2.6.10