Re: Need to know filter expression for computing bandwidth

[Martin Visser <martinvisser99 () gmail com>]

Hi Wo,

To do what you want, you can first "calculate" it visually - by using the
IO Graph. Load your file and then Select Statistics:IO-Graph. You might
want to apply one or two appropriate display filters in the Filter box.
Then if you are say interested in the bits per second in *every* second,
set the Tick Interval to seconds, and Units to Bits/Tick. The Y axis
heights at each Tick are your samples in bits per second. You can adjust
the Tick Interval as you need, allow aggregation of that data at different
intervals. (Obviously if your tick interval is say 0.1 secs, the height of
each sample is bits per 0.1 seconds - for need to multiply by 10 to get a
bps rate for each 0.1 second interval.

If I want to accurately determine the size of a particular burst, I try and
find the first and last packet that contains the burst I want. I then
define a display filter like "frame.number >= 123 && frame.number <= 456".
You can then use the Statistics:Summary menu and look in the Displayed
column. You can then use the appropriate calculated data, like time between
first and last packet, bytes, or just Mbits per second



Regards, Martin

MartinVisser99 () gmail com


On 9 January 2013 04:05, W T <wokelmal () gmail com> wrote:

> Hi,
>
> I have a TCP session between client and server, the data comes from the
> server at regular interval as burst, for example once in every 20 seconds
> few 500~900Kbps of data gets send in few seconds.
>
> I am interested in computing the bandwidth during that burst period, and
> also duration of that particular burst. When i use follow TCP stream or TCP
> conversation it gives the average bps and it not i wanted.  I wanted each
> burst interval, is there any way we can get it directly.
>
> Thanks
> Wo.
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>              mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe