Re: [Ethereal-users] Ethereal Training

[Guy Harris <gharris@xxxxxxxxx>]

On Mon, Sep 02, 2002 at 04:02:32PM +0100, sjs@xxxxxxxxxxxxxxxxxxxxxxx wrote:
> If that isn't feasible though, can anyone tell me how to capture packet
> sizes

If by "packet sizes" you mean the size of the frame, in bytes, that's
not part of the packet data, *BUT* it's part of the per-packet header in
the libpcap capture file format, so Ethereal *already* captures it (in
the sense of getting it from libpcap) and saves it to the file.

If what you *really* meant, given:

> and better still create a column for the size in kilobytes?

was "how to *display* packet sizes", the answer is "add a column of type
'Packet length (bytes)' via the 'Columns' item in the Ethereal
preferences".  Unfortunately, you currently have to exit Ethereal and
restart it for that column to appear, as nobody's written code to make
it do so on the fly.

There is no way to get the packet length in KB, as nobody's written code
to add support for columns of type "Packet length (kilobytes)".