Re: [Wireshark-dev] compare two capture files and io graph

2009-02-04 Thread michele
On Mon, 02 Feb 2009 14:42 +0100, michele mich...@mailc.net wrote: I'm interested in other opinions. What about having a preplotted graph in IOGraph? Since I need to perform a comparison between two dumps, say A and B, and the A dump is very small, a solution can be having A automatically

Re: [Wireshark-dev] compare two capture files and io graph

2009-02-04 Thread Michele Pedrolli
michele wrote: I'm interested in other opinions. What about having a preplotted graph in IOGraph? Since I need to perform a comparison between two dumps, say A and B, and the A dump is very small, a solution can be having A automatically plotted in IOGraph, before starting plotting B. The

Re: [Wireshark-dev] compare two capture files and io graph

2009-02-02 Thread michele
Martin Visser wrote: You might also optionally overlay the graphs. The problem with merging the captures files is that you really still have to keep them separate to make all of the other deconding and detailed analysis is consistent. Overlaying the two graphs in the same IO Graph window

Re: [Wireshark-dev] compare two capture files and io graph

2009-02-01 Thread michele
michele wrote: I need to compare two different capture files, looking for similarities in both of them. Using a modified version of IO Graph and a new field which counts the cumulative frames length, I'm plotting a cumulative graph of bytes over time. Now I want to (graphically) compare two

Re: [Wireshark-dev] compare two capture files and io graph

2009-02-01 Thread Martin Visser
Another alternative is to basically allow two separate instances of Wireshark (with 2 separate capture files), to have their IOGraph windows be displayed adjacent to each other. You might then have a tool, either graphical or via a filter, to be able to synchronise point in the graph. You could