First time here? Check out the FAQ!

Ask Your Question
0

Finding a gap in length or id

asked Jun 11 '19

LPF gravatar image

I am testing a LAN switch and I am sending packets with the length of each frame incremented by 1 from 126 to 1500 and back again. I am trying to use the incremented lengths to find a gap. All of these packets are coming from the same source, so if there is a way to find a gap in IP identifiers that would also solve my problem.

Thanks you!

Preview: (hide)

2 Answers

Sort by » oldest newest most voted
0

answered Jun 12 '19

Bob Jones gravatar image

Maybe graph length of frames in the IO graph tool and look for a discontinuity? Do you know how to use it? Unless the gap is big, it might be easy to miss.

I would probably export the dataset and move to excel or another tool and have it calculate the length deltas for me... they should all be 1, except where a gap exists. So, graphing the delta calculation, anything above 1 would be a gap. It should stand out a little more this way.

Preview: (hide)
link

Comments

The I/O viewer isn't helpful because it is always bytes/sec, but exporting to excel works great!

Thanks Bob!

LPF gravatar imageLPF ( Jun 12 '19 )

It's possible to get other values on the graph. If you are interested, we can provide more detail.

Bob Jones gravatar imageBob Jones ( Jun 16 '19 )
0

answered Jun 16 '19

Christian_R gravatar image

updated Jun 16 '19

You can do this task by different ways. 2 of them I show you.

  1. You can use tshark -> Have a detailed look here https://www.youtube.com/watch?v=gMg8t...
  2. You can use the "File -> Export Packet dissections -> As CSV..." dialog to export the packet pane view to a csv file. After that you can import it into excel and do some sorts or scripting around it....
Preview: (hide)
link

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: Jun 11 '19

Seen: 793 times

Last updated: Jun 16 '19