wireshark io graph can't show some parameters in Y field

asked 2021-01-19 08:39:41 +0000

taotiemuren gravatar image

updated 2021-01-20 07:56:31 +0000

Guy Harris gravatar image


One parameter in Y Field (set MAX Y Field)can't be displayed in IO graph screen and it shows no packets in inteval, but its value is valid in wireshark screen and it's always 15. the filter for this parameter is valid is same as in wireshark screen.

My wireshark version is 3.2.6, is there any issue in this version?

edit retag flag offensive close merge delete


Wireshark has many parameters defined (1000s?). Exactly which one are you having issues with? You might want to share how you set up IO graph with the exact syntax you used for the various fields.

Bob Jones gravatar imageBob Jones ( 2021-01-19 16:27:53 +0000 )edit

I make a self-definition dissector and add filter for new message.

  1. filter message with A.x == 12, then there is about 1000 messages dispalyed in screen
  2. open IO graph, set "Y Field" to "A.x", set "Y Axis" to "Packets", it show normally in screen.
  3. then reset "Y Axis" to MAX(Y Field), in my expectation, it should shows a horizontal line and value is 12 as all filtered packets matching this condition, but actuclly, it shows no packets in intervals.
  4. if I reset Y Axis" to "Packets", it returns to shows value normally.
taotiemuren gravatar imagetaotiemuren ( 2021-01-20 08:11:49 +0000 )edit