Ethereal-users: Re: [Ethereal-users] how to get total time of a connections?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: George Nychis <gnychis@xxxxxxx>
Date: Sun, 02 Apr 2006 14:19:15 -0400
Sorry, I understand what you're saying now.  I got the script working,
just had to do:
tethereal -o
column.format:"No.","%m","Time","%t","hw-src","%uhs","hw-dst","%uhd","Source","%s","src-port","%rS","Destination","%d","dst-port","%uD","len","%L","Protocol","%p","Info","%i"

Thanks for your help :)

- George


George Nychis wrote:
> Aren't you setting the columns in the script yourself?  Thats what I
> understood all the $command = stuff to be.
> 
> 
> Sake Blok wrote:
>> On Sun, Apr 02, 2006 at 12:29:53PM -0400, George Nychis wrote:
>>> Anyone else try this script in Linux?  I don't think it would make any
>>> differences since both tools are standard across both.. but i'm not
>>> getting any flow information printed out, only standard tethereal output:
>>>
>>> 235879 171898.784066 192.168.1.112 -> 207.46.20.60 TCP 33925 > 80 [ACK]
>>> Seq=189 Ack=961 Win=7760 Len=0 TSV=294276414 TSER=121110989
>> This means the parsing is failing:
>>
>>    } else {
>>       #
>>       # Packet that can not be parsed"
>>       #
>>       print;
>>       next;
>>    }
>>
>> Have you changed your column-settings in ethereal to match mine? 
>> If not, you have to alter the script to read out yours (yes, I know
>> this is an awkward way of doing things, but initially, the script 
>> was never written to be used by anyone other than me...)
>>
>> Hope this helps, Cheers,   Sake
>> _______________________________________________
>> Ethereal-users mailing list
>> Ethereal-users@xxxxxxxxxxxx
>> http://www.ethereal.com/mailman/listinfo/ethereal-users
>>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>