Wireshark I/O graph

Wireshark I/O graph

As shown above, this window contains a chart drawing area along with a customizable list of graphs. Graphs are saved in your current profile. They are divided into time intervals, which can be set as described below. Hovering over the graph shows the last packet in each interval except as noted below. Clicking on the graph takes you to the associated packet in the packet list.

菜单栏： Statistics -> I/O graph

新增之后，可以在Display Filter中设置过滤条件，如

ip.src==192.168.0.205
udp.port eq 前端端口号 and udp.port eq 本地端口号

右下角 Save AS 可以导出 Comma Seperated Values ，即逗号分隔的packets数量，每一列即1个graph

"Interval start","All Packets","TCP Errors","All Packets","All Packets"
0,0,0,0,0
1,6191,0,0,3090
2,28038,0,0,14023
3,28144,0,0,14067
4,37801,0,9703,14030
5,42187,0,14073,14063
6,42150,0,14054,14025
7,42163,0,14029,14062
8,42170,0,14061,14045
9,42040,0,14012,14011
10,41660,0,13883,13883
11,42099,0,14023,14031
12,41500,0,13404,14032
13,28090,0,0,14047
14,28135,0,0,14060
15,28133,0,0,14060
16,28092,0,0,14026
17,28140,0,0,14083
18,27999,0,0,13987
19,27780,0,0,13883
20,28061,0,0,14024
21,28117,0,0,14062
22,28085,0,0,14028
23,28129,0,0,14042
24,40630,0,12529,14052
25,42164,0,14039,14062
26,42212,0,14070,14061

可以在excel中重新画图

该功能可以查看想要查看的 IP，TCP， UDP等数据类型的数据，也可看各传感器有没有丢包等。

具体用法参考文官网：The “I/O Graphs” Window

---

欢迎关注公众号【三戒纪元】