Ethereal

RE: [Ethereal-users] selective Stats?
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-users: February 2005


>Is there a means to examine or graph a selected byte in a packet?
>Essentially, there is a byte in the packet that I would like to monitor from packet to packet.  >If I could graph the value of the byte over time, that would be perfect

Not that I know of. If you select "advanced" in the "Y Axis" section of "Statistics", "IO Graphs", you can ask for a graph that takes as input values of fields in the decoding; but AFAIK it cannot be used with byte positions; i.e. you can do that on tcp.srcport, but not on "byte 4 of the packet".

It should be easy to write a script that parses the output of tethereal -x to extract one byte of each packet and output the result to a file, which you can later process with any spreadsheet.


Powered by MHonArc 2.6.10