Wireshark · Ethereal-dev: Re: [Ethereal-dev] ABS/REL time in display filters

[Guy Harris <gharris@xxxxxxxxx>]

On Wed, May 30, 2001 at 06:45:48PM +1000, Ronnie Sahlberg wrote:
> when applying a display filter, the frame.time_delta field of the frame
> layer is changed
> to be the delta between the displayed frames and not the captured frames.
> This means that the display filter only really works once.
> This is a "feature" of the behaviour in file.c

...and an intentional one; if, for example, you've filtered the display
to show one TCP connection (a side-effect of "Follow TCP stream", which
I sometimes use *solely* for its side-effect), that lets you see, for
example, the time span between a transmission and an ACK.