Revision history  [back]

The reason the percent bytes isn't 100% Ethernet even though the percent packets is 100% Ethernet is because the statistics is only counting the Ethernet framing bytes as being Ethernet bytes, but not the Ethernet payload bytes.

Personally, I've never liked the way Wireshark computes these statistics, but that's the way Wireshark has behaved for the last 6+ years.

For more information and background, refer to Issue 1885: "Protocol Hierarchy Statistics" give misleading byte numbers.