Seeking explanation on bytes count in 'Protocol hierarchy'
Please refer to the pcap file.
I am seeking explanation on "Statistics -> Protocol hierarchy". Based on the position (indentation) of "Line-based text data" its Bytes count should be a subset of that of "Hypertext Transfer Protocol". But the former's count is much more. Why?
THANKS very much
Opening the trace file that you linked to, I see that in the Protocol Hierarchy window "Line-based text data" is 3 packets and 8,260 bytes, and "Hypertext Transfer Protocol" is 87 packets and 105,098 bytes. So "Line-based text data" is a subset of "Hypertext Transfer Protocol." What are you seeing that is different?