Re: HTTP Protocol

"Usman Qureshi" <[email protected]> Tue, 19 Sep 2006 14:57:00 -0400
Newsgroups gmane.network.ethereal.user
Message-ID <[email protected]>
--===============1054018777==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org and subscribe to [email protected].
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-users
-------------------


--===============1054018777==
Content-Type: multipart/alternative; 
	boundary="----=_Part_17803_19282466.1158692220614"

------=_Part_17803_19282466.1158692220614
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Thank you for you reply Martin.

On 9/19/06, Visser, Martin <[email protected]> wrote:
>
> -------------------
> The Ethereal project is being continued at a new site.  Please go to
> http://www.wireshark.org and subscribe to [email protected].
> Don't forget to unsubscribe from this list at
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> -------------------
>
> Usman,
>
> You should probably ask this on Wireshark-users rather than Ethereal-users
> as this list is deprecated
>
> Anyway, there is no definitive answer to your question. Ethereal/Wireshark
> doesn't have a overhead calculator built in. Also, there is a big question
> as to by what do you mean overhead? Do you mean everthing this isn't
> displayed as text in the browser i.e. in HTML like <B>Bold text</B> - are
> the <B> & </B> tags overhead? Or what about HTTP headers such as
> "Accept-Language: en-au\r\n" - are these overhead? (And is image compression
> such as GIF underhead (is that a word) ????)
>
> If you just want to take away the PPP/Ethernet/IP/TCP layers away from the
> HTTP content an easy way is to right-click on a stream and select "Follow
> TCP Stream" you will get a dialog popup. The value at the bottom shows the
> total of the data portion of the TCP stream, which pretty well is the HTTP
> data. If you then close this box and then open the menu item
> "Statistics:Protocol Hierarchy" you will be able to see the total size of
> frames transmitted. (there is also a HTTP leaf - which is different from the
> previous value - I'm not sure why the diff - you may want to investigate).
> Subtracting the smaller number from the larger number should give you an
> idea of the overheads, at least as previously defined.
>
> Martin Visser
>
> Technology Consultant
> Consulting & Integration
> Technology Solutions Group - HP Services
>
> 410 Concord Road
> Rhodes NSW  2138
> Australia
>
> Mobile: +61-411-254-513
> Fax: +61-2-9022-1800
> E-mail: martin.visserAThp.com
>
> This email (including any attachments) is intended only for the use of
> the individual or entity named above and may contain information that is
> confidential, proprietary or privileged. If you are not the intended
> recipient, please notify HP immediately by return email and then delete
> the email, destroy any printed copy and do not disclose or use the
> information in it.
>
>
>
> ________________________________
>
> From: [email protected] on behalf of Usman Qureshi
> Sent: Tue 19/09/2006 1:45 PM
> To: [email protected]
> Subject: [Ethereal-users] HTTP Protocol
>
>
>
> -------------------
> The Ethereal project is being continued at a new site.  Please go to
> http://www.wireshark.org <http://www.wireshark.org/>  and subscribe to
> [email protected].
> Don't forget to unsubscribe from this list at
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> -------------------
>
>
>
> _______________________________________________
> Ethereal-users mailing list
> [email protected]
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>

------=_Part_17803_19282466.1158692220614
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Thank you for you reply Martin.<br><br>
<div><span class="gmail_quote">On 9/19/06, <b class="gmail_sendername">Visser, Martin</b> &lt;<a href="mailto:[email protected]">[email protected]</a>&gt; wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">-------------------<br>The Ethereal project is being continued at a new site.&nbsp;&nbsp;Please go to<br><a href="http://www.wireshark.org">
http://www.wireshark.org</a> and subscribe to <a href="mailto:[email protected]">[email protected]</a>.<br>Don't forget to unsubscribe from this list at<br><a href="http://www.ethereal.com/mailman/listinfo/ethereal-users">
http://www.ethereal.com/mailman/listinfo/ethereal-users</a><br>-------------------<br><br>Usman,<br><br>You should probably ask this on Wireshark-users rather than Ethereal-users as this list is deprecated<br><br>Anyway, there is no definitive answer to your question. Ethereal/Wireshark doesn't have a overhead calculator built in. Also, there is a big question as to by what do you mean overhead? Do you mean everthing this isn't displayed as text in the browser 
i.e. in HTML like &lt;B&gt;Bold text&lt;/B&gt; - are the &lt;B&gt; &amp; &lt;/B&gt; tags overhead? Or what about HTTP headers such as &quot;Accept-Language: en-au\r\n&quot; - are these overhead? (And is image compression such as GIF underhead (is that a word) ????)
<br><br>If you just want to take away the PPP/Ethernet/IP/TCP layers away from the HTTP content an easy way is to right-click on a stream and select &quot;Follow TCP Stream&quot; you will get a dialog popup. The value at the bottom shows the total of the data portion of the TCP stream, which pretty well is the HTTP data. If you then close this box and then open the menu item &quot;Statistics:Protocol Hierarchy&quot; you will be able to see the total size of frames transmitted. (there is also a HTTP leaf - which is different from the previous value - I'm not sure why the diff - you may want to investigate). Subtracting the smaller number from the larger number should give you an idea of the overheads, at least as previously defined.
<br><br>Martin Visser<br><br>Technology Consultant<br>Consulting &amp; Integration<br>Technology Solutions Group - HP Services<br><br>410 Concord Road<br>Rhodes NSW&nbsp;&nbsp;2138<br>Australia<br><br>Mobile: +61-411-254-513<br>Fax: +61-2-9022-1800
<br>E-mail: <a href="http://martin.visserAThp.com">martin.visserAThp.com</a><br><br>This email (including any attachments) is intended only for the use of<br>the individual or entity named above and may contain information that is
<br>confidential, proprietary or privileged. If you are not the intended<br>recipient, please notify HP immediately by return email and then delete<br>the email, destroy any printed copy and do not disclose or use the<br>
information in it.<br><br><br><br>________________________________<br><br>From: <a href="mailto:[email protected]">[email protected]</a> on behalf of Usman Qureshi<br>Sent: Tue 19/09/2006 1:45 PM
<br>To: <a href="mailto:[email protected]">[email protected]</a><br>Subject: [Ethereal-users] HTTP Protocol<br><br><br><br>-------------------<br>The Ethereal project is being continued at a new site.&nbsp;&nbsp;Please go to
<br><a href="http://www.wireshark.org">http://www.wireshark.org</a> &lt;<a href="http://www.wireshark.org/">http://www.wireshark.org/</a>&gt;&nbsp;&nbsp;and subscribe to <a href="mailto:[email protected]">[email protected]
</a>.<br>Don't forget to unsubscribe from this list at<br><a href="http://www.ethereal.com/mailman/listinfo/ethereal-users">http://www.ethereal.com/mailman/listinfo/ethereal-users</a><br>-------------------<br><br><br><br>
_______________________________________________<br>Ethereal-users mailing list<br><a href="mailto:[email protected]">[email protected]</a><br><a href="http://www.ethereal.com/mailman/listinfo/ethereal-users">
http://www.ethereal.com/mailman/listinfo/ethereal-users</a><br></blockquote></div><br>

------=_Part_17803_19282466.1158692220614--

--===============1054018777==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Ethereal-users mailing list
[email protected]
http://www.ethereal.com/mailman/listinfo/ethereal-users

--===============1054018777==--