Ethereal-users: [Ethereal-users] RE: Possible Anomaly in tethereal -z stats system
Mr. Sahlberg,
Many thanks for your reply.
I have built a new/clean Fedora Core 4 system (Workstation option).
I have built Ethereal-0.10.12-SVN-15266.tar.gz on this system.
I have tested the tethereal -z system and it works perfectly.
I have also used another system to investigate using RPMs and the problem
seems to be present in RPM-based distributions released by RedHat,
originally for RedHat 8,9, etc. and now for Fedora Core.
Thanks for your insightful suggestion.
I will attempt to register the situation with RedHat/Fedora.
Regards, Tim Everitt.
> -----Original Message-----
> From: ronnie sahlberg [mailto:ronniesahlberg@xxxxxxxxx]
> Sent: 08 August 2005 09:44
> To: Ethereal user support
> Cc: tim.everitt@xxxxxxxx
> Subject: Re: Possible Anomaly in tethereal -z stats system
>
> Can you try the latest SVN version of ethereal?
> Check out SVN compile it and try?
>
>
> I have tested it on my machine here and it works fine with the command
> line you specified.
>
>
> If this still fails for you, maybe there is something in your capture
> that triggers the bug which is not in my captures.
> Can you send me a small capture file that displays this problem?
>
>
> On 8/5/05, Tim Everitt <tim.everitt@xxxxxxxx> wrote:
> > I've recently upgraded from 0.10.6 to 0.10.12 and a very useful part of
> the
> > tethereal -z stats package that I use to create CSV files for plotting
> has
> > stopped working.
> >
> > I'm using Fedora Core 4 and the Ethereal 0.10.12 RPMs from the
> > download.fedora.redhat.com website.
> >
> > The command
> >
> > # tethereal -r <file.pcap> -z
> "io,stat,1,SUM(frame.pkt_len)frame.pkt_len"
> >
> > To get per-second octet-counts has stopped working. It runs ok but does
> not
> > match any traffic so produces 0 as output. Other operators are working
> ok,
> > e.g. SUM(tcp.len)tcp.len, etc.
> >
> > On further investigation, use of any "frame..." operator in the io,stat
> > package fails to match any frames.
> >
> > Use of frame.pkt_len as a display filter works perfectly.
> >
> > Can anyone direct me towards the area of code where the parsing and
> > processing is done so that I can investigate further or does anyone know
> > the
> > code well enough to check.
> >
> > Thanks and Regards, Tim Everitt.
> >
> > _______________________________________________
> > Ethereal-users mailing list
> > Ethereal-users@xxxxxxxxxxxx
> > http://www.ethereal.com/mailman/listinfo/ethereal-users
> >
