Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] noob question about time/elapsed time

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Sake Blok <sake@xxxxxxxxxx>
Date: Fri, 5 Jun 2009 18:37:48 +0200

On Fri, Jun 05, 2009 at 10:21:51AM -0400, Server Admn wrote:
>     
>    I set up a capture to run for 60 seconds.  The capture starts & then stops
>    after a minute, which is what I expected.

Good!

>    When I bring up the Statistics -> Summary window, it shows the elpased
>    time as roughly 10 seconds.  (I've tried this several times).  The traffic
>    during these tests is constant, and continues for 60 seconds, it's not
>    like there is only 10 seconds worth of traffic and 50 seconds of
>    idleness during the minute.

Not so good... Can you paste the output of "Help -> About Wireshark"?
This might be an issue with libpcap or WinPcap. These libraries provide
the timestamps to the packets.

Cheers,
    Sake

  • Follow-Ups:
    • Re: [Wireshark-users] noob question about time/elapsed time
      • From: Server Admn
  • References:
    • [Wireshark-users] noob question about time/elapsed time
      • From: Server Admn
  • Prev by Date: Re: [Wireshark-users] Two http headers in packet?
  • Next by Date: Re: [Wireshark-users] noob question about time/elapsed time
  • Previous by thread: [Wireshark-users] noob question about time/elapsed time
  • Next by thread: Re: [Wireshark-users] noob question about time/elapsed time
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation