;
;                                  ENCAP.QRY
;
; This is an example of query file for making a comparision between the two 
;ethernet encapsulation methods (DIX and IEEE 802.3) as used together on a
;network

UseSemigraphicCharacters=yes
ReportFrameCount=no
ReportFrameRate=no
ReportFramePercentage=yes
ReportByteCount=no
ReportByteRate=no
ReportBytePercentage=yes
ReportFrameSize=yes
ReportTotals=no
ReportAverages=yes
ReportMaximums=no
ReportMinimums=no
ReportExtremeFramesizes=no
ReportJustFinal=yes

LengthOfInterval= 0 0 5
ExcludedFrames=GetVMVar ("FrameSize")=CantTell
DefaultLengthParameter=GetVMVar ("FrameSize")

GroupName=IEEE_802.3_Frames
OutCap=
Predicate=MAC.LEN_TYPE<=1500
LengthParameter=GetVMVar ("FrameSize")

GroupName=DIX_Frames
OutCap=
Predicate=MAC.LEN_TYPE>1500
LengthParameter=GetVMVar ("FrameSize")