I've recently upgraded from 0.10.6 to 0.10.12 and a very useful part of the tethereal -z stats package that I use to create CSV files for plotting has stopped working. I'm using Fedora Core 4 and the Ethereal 0.10.12 RPMs from the download.fedora.redhat.com website. The command # tethereal -r <file.pcap> -z "io,stat,1,SUM(frame.pkt_len)frame.pkt_len" To get per-second octet-counts has stopped working. It runs ok but does not match any traffic so produces 0 as output. Other operators are working ok, e.g. SUM(tcp.len)tcp.len, etc. On further investigation, use of any "frame..." operator in the io,stat package fails to match any frames. Use of frame.pkt_len as a display filter works perfectly. Can anyone direct me towards the area of code where the parsing and processing is done so that I can investigate further or does anyone know the code well enough to check. Thanks and Regards, Tim Everitt.
Powered by MHonArc 2.6.10