Ask Your Question

Seeking explanation on bytes count in 'Protocol hierarchy'

asked 2018-02-17 11:11:53 +0000

Vindra gravatar image

Please refer to the pcap file.

I am seeking explanation on "Statistics -> Protocol hierarchy". Based on the position (indentation) of "Line-based text data" its Bytes count should be a subset of that of "Hypertext Transfer Protocol". But the former's count is much more. Why?

THANKS very much

edit retag flag offensive close merge delete


Opening the trace file that you linked to, I see that in the Protocol Hierarchy window "Line-based text data" is 3 packets and 8,260 bytes, and "Hypertext Transfer Protocol" is 87 packets and 105,098 bytes. So "Line-based text data" is a subset of "Hypertext Transfer Protocol." What are you seeing that is different?

Jim Aragon gravatar imageJim Aragon ( 2018-02-17 17:41:27 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2018-02-21 18:20:07 +0000

cmaynard gravatar image

The explanation is that this is how protocol hierarchy statistics was implemented, which, in my opinion, is not the correct way that it should have been implemented. See Bug 1885 for more information.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2018-02-17 11:11:53 +0000

Seen: 297 times

Last updated: Feb 21 '18