Khurram,
What exactly is "real-time"? I actually think displaying I/O graphs within 2 or
3 seconds of receiving is very much real-time (particular compared to say SNMP
type tools). If you mean within a micro-second then the overhead of display 100
000 packets per second is not going to be very
Please correct me if I'm wrong, but I think there is an error in the way
wireshark identifies a segment that is accociated with an ACK in the TCP
SEQ/ACK analysis. Consequently this affects RTT calculation. In summary
I think that Wireshark is incorrectly calculating this on the last
segment matchi
Sorry to be a pedant, but I think you will find that lack of copyright
notice does not imply lack of copyright. (The US used to have this but
adopted the provisions of the Berne Convention in 1989 joining more
enlightened countries). See
http://en.wikipedia.org/wiki/Copyright#Copyright_notices for
