Ethereal-users: [Ethereal-users] Possible Anomaly in tethereal -z stats system

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Tim Everitt" <tim.everitt@xxxxxxxx>
Date: Fri, 5 Aug 2005 15:05:27 +0100
I've recently upgraded from 0.10.6 to 0.10.12 and a very useful part of the
tethereal -z stats package that I use to create CSV files for plotting has
stopped working.

I'm using Fedora Core 4 and the Ethereal 0.10.12 RPMs from the
download.fedora.redhat.com website.

The command

# tethereal -r <file.pcap> -z "io,stat,1,SUM(frame.pkt_len)frame.pkt_len"

To get per-second octet-counts has stopped working. It runs ok but does not
match any traffic so produces 0 as output. Other operators are working ok,
e.g. SUM(tcp.len)tcp.len, etc.

On further investigation, use of any "frame..." operator in the io,stat
package fails to match any frames.

Use of frame.pkt_len as a display filter works perfectly.

Can anyone direct me towards the area of code where the parsing and
processing is done so that I can investigate further or does anyone know the
code well enough to check.

Thanks and Regards, Tim Everitt.