summaryrefslogtreecommitdiff
path: root/docbook/wsug_src
diff options
context:
space:
mode:
authorUlf Lamping <ulf.lamping@web.de>2006-06-07 08:36:29 +0000
committerUlf Lamping <ulf.lamping@web.de>2006-06-07 08:36:29 +0000
commitab40a87c67fb2147cc1eef2c25b7dc8954f595d4 (patch)
treef4f7151c15dbef7a765e72541ff6f86adc24e351 /docbook/wsug_src
parentc2e72cf272616b1f450fda834c6843bfadaacdc8 (diff)
downloadwireshark-ab40a87c67fb2147cc1eef2c25b7dc8954f595d4.tar.gz
explain why packets of layers won't sum up, "fixes" eth#988
svn path=/trunk/; revision=18381
Diffstat (limited to 'docbook/wsug_src')
-rw-r--r--docbook/wsug_src/WSUG_chapter_statistics.xml10
1 files changed, 10 insertions, 0 deletions
diff --git a/docbook/wsug_src/WSUG_chapter_statistics.xml b/docbook/wsug_src/WSUG_chapter_statistics.xml
index d56941af03..a95cd13ac0 100644
--- a/docbook/wsug_src/WSUG_chapter_statistics.xml
+++ b/docbook/wsug_src/WSUG_chapter_statistics.xml
@@ -167,6 +167,16 @@
</note>
<note><title>Note!</title>
<para>
+ Protocol layers can consist of packets that won't contain any higher layer
+ protocol, so the sum of all higher layer packets may not sum up to the
+ protocols packet count.
+ Example: In the screenshot TCP has 85,83% but the sum of the subprotocols
+ (HTTP, ...) is much less. This may be caused by TCP protocol overhead,
+ e.g. TCP ACK packets won't be counted as packets of the higher layer).
+ </para>
+ </note>
+ <note><title>Note!</title>
+ <para>
A single packet can contain the same protocol more than once. In this case,
the protocol is counted more than once. For example: in some tunneling
configurations the IP layer can appear twice.