Monitoring the number of field appearances

The variable COUNT FIELDS (Y Field) counts the appearance of a specific field in the capture file, or in information filtered by a filter configured in the display filter column.

The principle of this is as follows:

  • In the Display filter columns, you configure a filter to the traffic that should be checked
  • In the Y Axis column, you configure COUNT FIELDS (Y Field)
  • In the Y Field column, you specify the field whose appearances you want to count

In the following screenshot (file CAP_1674_06_11), you see an example of how it is used:

Here, we can see that we checked the number of appearances of A records and AAAA records: the upper graph is for the IPv4 A records, and the lower graph is for the IPv6 AAAA records.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
18.218.136.90