Wireshark · Ethereal-users: Re: [Ethereal-users] don't know the result of Protocol Hierarchy Statistics

[Ulf Lamping <ulf.lamping@xxxxxx>]

Ngo Giang wrote:

> Hello every one,
>  
> I'm newbie to ethereal. My PC is on the LAN , i used ethereal to 
> capture traffic on the NIC of my PC. In Protocol Hierarchy Statistics 
> , I saw
>  
>         TCP traffic is approximate 85%,  in which
>                                ftp data is 49 %,  
>                                   FTP is 1.74%
>                                  HTTP is 3.4% and
>  sum of other traffic belong to TCP  less than 1% .
>  
> I saw sum of ftp data, ftp, http and other traffic is only appoximate 
> 55% , smaller than 85 %.
> Could any one tell me what is 30 % remain traffic ? 
>  

The rest is plain TCP traffic (like TCP Acknowledges), which is not part 
of one of the subgroups.

Example: a TCP ACK in a TCP stream containing a HTTP session is not 
counted as HTTP traffic, as the HTTP dissector is not affected in that case.

Regards, ULFL