This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

FRAMES percentage

0

How do I ascertain the percentage of management frames vs data frames?

Edit: changed all upper case characters to resonable cases. Hint : you should check if your CAPS lock key is stuck, or if someone stole all your lower case letters ;-)

asked 26 Jan '13, 08:26

SEGACIOUSBLONDE's gravatar image

SEGACIOUSBLONDE
11112
accept rate: 0%

edited 26 Jan '13, 08:36

Jasper's gravatar image

Jasper ♦♦
23.8k551284


One Answer:

0

You could try to find a filter that will only show management frames, or will only show data frames. This usually depends on your protocols, so there is no generic answer for this, except maybe filtering on TCP packets that have a payload length of 0.

If you use the latest development builds of Wireshark (1.9.x) you'll notice that the status bar will tell you how many packets are still displayed by the filter, and what that percentage is compared to all frames in the file. Older versions will not yet show the percentage.

answered 26 Jan '13, 08:39

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

TY FOR YOUR HELP!! SORRY IF UPPERCASE LETTERS BOTHER YOU. I HAVE A VISION PROBLEM DUE TO AN ACCIDENT. I DON'T SEE WHY PEOPLE USE ALL LOWER CASE LETTERS (NO PUN INTENDED.)

(26 Jan '13, 10:04) SEGACIOUSBLONDE

SORRY TO HEAR THAT. UPPERCASE IS USUALLY CONSIDERED "SCREAMING" AT SOMEONE, SO THAT IS WHY.

(26 Jan '13, 11:43) Jasper ♦♦