Wireshark-dev: [Wireshark-dev] Extending IO Graphs
From: Joshua Wright <jwright@xxxxxxxxxxx>
Date: Fri, 04 May 2007 16:51:12 -0400
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I love the IO Graphs feature.  I think it's one of those
commonly-overlooked features that, once people discover it, they learn
how immensely powerful Wireshark is.

A friend sent me a packet capture from a wireless network the other day,
wondering why his stations were seeing poor performance.  I sent him
this screen-shot:

http://802.11ninja.net/~jwright/wireshark-io-retries.png

Using the display filters "wlan.addr eq <foo> and wlan.fc.retry eq 0"
and again with "... retry eq 1".  Looking at this, it's pretty obvious
the issue is PHY-related, since retries are exceeding valid frames at times.

The reason I'm sending this to wireshark-dev is that I'd like to find
out if there have been any plans or suggestions on extending the IO
Graphs functionality to retain the time-scale on X, but change Y to the
value of one or more numeric fields.  For example, it'd be great to
graph statistics such as the 802.11 frame transmit rate, RSSI, 802.11
sequence numbers, WEP IV's, etc.  I'm sure non-802.11 analysis would
also benefit from this, such as ephemeral UDP/TCP ports, or HTTP
content-length information, etc.

Has there been any thought on implementing this feature? I'm happy to
try my hand at it, but I figured it would be wise to ask before I dive
into something.

Thanks,

- -Josh
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
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=MNeE
-----END PGP SIGNATURE-----