First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Finding a gap in length or id

I am testing a LAN switch and I am sending packets with the length of each frame incremented by 1 from 126 to 1500 and back again. I am trying to use the incremented lengths to find a gap. All of these packets are coming from the same source, so if there is a way to find a gap in IP identifiers that would also solve my problem.

Thanks you!

LPF's avatar
1
LPF
asked 2019-06-11 22:27:13 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

0

You can do this task by different ways. 2 of them I show you.

  1. You can use tshark -> Have a detailed look here https://www.youtube.com/watch?v=gMg8t...
  2. You can use the "File -> Export Packet dissections -> As CSV..." dialog to export the packet pane view to a csv file. After that you can import it into excel and do some sorts or scripting around it....
Christian_R's avatar
2.1k
Christian_R
answered 2019-06-16 18:52:24 +0000, updated 2019-06-16 18:53:08 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments
0

Maybe graph length of frames in the IO graph tool and look for a discontinuity? Do you know how to use it? Unless the gap is big, it might be easy to miss.

I would probably export the dataset and move to excel or another tool and have it calculate the length deltas for me... they should all be 1, except where a gap exists. So, graphing the delta calculation, anything above 1 would be a gap. It should stand out a little more this way.

Bob Jones's avatar
1.5k
Bob Jones
answered 2019-06-12 00:51:26 +0000
edit flag offensive 0 remove flag delete link
more

Comments

The I/O viewer isn't helpful because it is always bytes/sec, but exporting to excel works great!

Thanks Bob!

LPF's avatar LPF (2019-06-12 12:40:12 +0000) edit
more
  • delete

It's possible to get other values on the graph. If you are interested, we can provide more detail.

Bob Jones's avatar Bob Jones (2019-06-16 20:02:09 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer