RE: [Ethereal-users] HTTP Protocol

["Visser, Martin" <martin.visser@xxxxxx>]

Usman,
 
You should probably ask this on Wireshark-users rather than Ethereal-users as this list is deprecated
 
Anyway, there is no definitive answer to your question. Ethereal/Wireshark doesn't have a overhead calculator built in. Also, there is a big question as to by what do you mean overhead? Do you mean everthing this isn't displayed as text in the browser i.e. in HTML like <B>Bold text</B> - are the <B> & </B> tags overhead? Or what about HTTP headers such as "Accept-Language: en-au\r\n" - are these overhead? (And is image compression such as GIF underhead (is that a word) ????)
 
If you just want to take away the PPP/Ethernet/IP/TCP layers away from the HTTP content an easy way is to right-click on a stream and select "Follow TCP Stream" you will get a dialog popup. The value at the bottom shows the total of the data portion of the TCP stream, which pretty well is the HTTP data. If you then close this box and then open the menu item "Statistics:Protocol Hierarchy" you will be able to see the total size of frames transmitted. (there is also a HTTP leaf - which is different from the previous value - I'm not sure why the diff - you may want to investigate). Subtracting the smaller number from the larger number should give you an idea of the overheads, at least as previously defined.
 
Martin Visser

Technology Consultant
Consulting & Integration
Technology Solutions Group - HP Services

410 Concord Road
Rhodes NSW  2138
Australia

Mobile: +61-411-254-513
Fax: +61-2-9022-1800    
E-mail: martin.visserAThp.com

This email (including any attachments) is intended only for the use of
the individual or entity named above and may contain information that is
confidential, proprietary or privileged. If you are not the intended
recipient, please notify HP immediately by return email and then delete
the email, destroy any printed copy and do not disclose or use the
information in it.



________________________________

From: ethereal-users-bounces@xxxxxxxxxxxx on behalf of Usman Qureshi
Sent: Tue 19/09/2006 1:45 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] HTTP Protocol



-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org <http://www.wireshark.org/>  and subscribe to wireshark-users@xxxxxxxxxxxxxx
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-users
-------------------