Wireshark-users: Re: [Wireshark-users] IO Graphs cumulative plot
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 5 Mar 2008 13:49:43 -0700
On Wed, Mar 05, 2008 at 08:34:10PM +0100, Stig Bjørlykke wrote:

> We already have the cumulative number of bytes in the frame dissector 
> (used for the cumulative column), so it's just a matter of adding this 
> as a generated frame field.

Do we?  The Cumulative Bytes column is pulled out of 
pinfo->fd->cum_bytes.

> This field does not always work as expected in the filter, because we 
> can't add a filter like "frame.cum_len > 1000".  But maybe it's better 
> to have this field than not at all?

Hmm.. what would frame.cum_len > 1000 do wrong?  I guess it depends on if 
it's cumulative from the beginning of the capture or for displayed 
packets.  That could get messy.


Steve