Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 8253] "No." and Time column doesn't comparable

[bugzilla-daemon@xxxxxxxxxxxxx]

Jeff Morriss changed bug 8253

What	Removed	Added
Status	UNCONFIRMED	CONFIRMED
CC		jeff.morriss.ws@gmail.com
Ever confirmed		1

Comment # 1 on bug 8253 from Jeff Morriss

This is a side-effect of using Wireshark's capability to capture on 2 or more
interfaces simultaneously.  The basic problem is that there is one thread per
interface working in parallel and it's really up to the OS scheduler when those
threads run and are able to write their packets to the file.

I can't see how this could be improved during capture.

There is (in the development builds of Wireshark) a command-line utility called
'reordercap' whose job is to solve this problem by re-ordering the packets
based on timestamp.

I suppose the GUI could have an option to reorder the capture file, write it
back to disk, and read it back in again (just to make it easier).

Beyond that, I think we're stuck with this... Deficiency.

---

      You are receiving this mail because:

• You are watching all bug changes.