Protocol Hierarchy Percent Bytes explained

asked 2019-09-29 11:42:20 +0000

Lusioanalios
1 ●1 ●1 ●1

updated 2019-09-29 12:00:35 +0000

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●973 ●227 https://www.wireshark.org

Hi I think I have a really dumb question. But I captured some traffic and than went to protcol hierarchy statistic. What I dont understand know how can IPv4 have less percent bytes than TCP? IP4v shows 3,7% and TCP 95,7% and so the number of bytes in TCP is much higher than in ipv4. I thought that TCP is in IPv4. So data+tcp+ip and without IP I thought to have less bytes (only data+tcp)

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2019-09-29 15:44:39 +0000

cmaynard

11115 ●11 ●317 ●165 https://www.igt.com/

Basically, the statistics is only counting the packet bytes associated with each layer and not the payload of each layer.

To understand the implementation better, it may help to go back to Bug 1885. I disagreed with the implementation back then (as noted in Comment 4), and I still disagree with it today.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-09-29 11:42:20 +0000

Seen: 12,278 times

Last updated: Sep 29 '19

Protocol Hierarchy Percent Bytes explained edit

1 Answer