This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello,

I have found MATE to be an incredibly useful tool (thanks for all the work on this!). I was wondering if there are any plans to add support for arithmetic operators? For example, it would be useful to be able to calculate such things as the number of retransmits or the total cumulative latency in a TCP connection.

If there are not currently plans for this, is there a specific reason? Has it just been a case of lack of resources, or has it been considered but decided it was too difficult for some reason?

Thanks, Ryan

asked 11 May '16, 07:07

ryber's gravatar image

ryber
146459
accept rate: 16%

edited 11 May '16, 07:25

Jaap's gravatar image

Jaap ♦
11.7k16101


Well, as with most things in Open Source, there isn't really a plan. People contribute what they need or find useful. Apparently no one has thus far had sufficient need for such a functionality so no one has worked on it.

Typically I'd consider using the IO Graph for the things you're talking about; I don't quite get how you'd intend to use them in MATE.

Anyway if you want to write up a detailed description of what you're looking for (possibly including example MATE configurations) you can always open an enhancement request in case someone picks the idea up and runs with it. (If you do, please report the number back here.) Of course, even better would be code to implement it. :-)

permanent link

answered 11 May '16, 13:13

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%

Thanks for your response, Jeff.

What I would like to do is be able to easily identify (in a large pcap) TCP streams with a large number of some indicator of dysfunction. For example, any 4-tuples with a large number of TCP resets. Or streams with the most retransmits, etc. And possibly to be able to do some tracking of ack and seq numbers. I have found it to be very powerful in that it can determine whether something has occurred for a given stream, tuple, etc. but it would be even better if it could track the number of occurrences.

At the moment, I am finding that I can do this with Lua. But if I have some time I will try looking through the MATE source code and seeing if it is something I might be able to implement (if so I will certainly let you know :) )

Thanks, Ryan

(13 May '16, 08:30) ryber
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×158
×27

question asked: 11 May '16, 07:07

question was seen: 816 times

last updated: 13 May '16, 08:30

p​o​w​e​r​e​d by O​S​Q​A