After following the steps in the tutorial i expected that the Protocol Hierarchical Statistics would have been extended with the stats details. This is not the case however. Although with tshark i can see that the details are being collected. Is there a way to expand the phs to show the details?
tshark -r /home/kurt/wireshark/foo_test.pcap -z foo,tree -z io,phs
OOPS: dissector table "sctp.ppi" doesn't exist
Protocol being registered is "Datagram Transport Layer Security"
Registering the register_foo_stat_trees
foo_stats_tree_init ..
queuing packet for tap 73 type 1
foo_stats_tree_packet ..
1 0.000000 10.1.1.1 -> 10.2.2.2 foo 60 Type ONE
queuing packet for tap 73 type 2
foo_stats_tree_packet ..
2 0.000001 10.1.1.1 -> 10.2.2.2 foo 60 Type TWO
queuing packet for tap 73 type 3
foo_stats_tree_packet ..
3 0.000002 10.1.1.1 -> 10.2.2.2 foo 60 Type DRIE
queuing packet for tap 73 type 4
foo_stats_tree_packet ..
4 0.000003 10.1.1.1 -> 10.2.2.2 foo 60 Type Unknown (0x04)
queuing packet for tap 73 type 0
foo_stats_tree_packet ..
5 0.000004 10.1.1.1 -> 10.2.2.2 foo 60 Type Unknown (0x00)
===================================================================
Protocol Hierarchy Statistics
Filter:
eth frames:5 bytes:300
ip frames:5 bytes:300
udp frames:5 bytes:300
foo frames:5 bytes:300
===================================================================
Foo Protocol/Packet Types value rate percent
Total Packets 5 1249.999941
FOO Packet Types 5 1249.999941 100.00%
ONE 1 249.999988 20.00%
TWO 1 249.999988 20.00%
DRIE 1 249.999988 20.00%
Unknown packet type (4) 1 249.999988 20.00%
Unknown packet type (0) 1 249.999988 20.00%
===================================================================
asked 22 Oct ‘12, 02:55
KurtDP
1●1●1●1
accept rate: 0%
edited 22 Oct ‘12, 06:00
SYN-bit ♦♦
17.1k●9●57●245