Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] hanging graphs

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Thu, 19 Dec 2002 21:07:52 +0100
Martin Regner wrote:
<I thought that it would be possible to use a filter like
<frame.time_delta < 0
<or
<!(frame.time_delta >= 0)
<but I don't get it to work (Ethereal 0.9.8, Windows 2000/98). 
<
<I can filter out packets where frame.time_delta >= 0, but not the opposite.

It seems to work better with earlier versions (Ethereal 0.9.1, 0.9.5, 0.9.7):

Ethereal 0.9.8
============
frame.time_delta lt 0      (no frames shown)
frame.time_delta ge 0   (1,2,4,6,11,16,20,23,25,27,35,37 ...)
frame.time_delta eq 0   (1)
frame.time_delta ne 0    (2,3,4,5,6,7,8,9,10,11,12,13,14...) OK!
frame.time_delta gt 0     (2,4,6,11,16,20,23,25,27,35,37,40...)

(3,5,7,12,17,21,24,26,28 are shown with negative values for "Time delta from previous packet")

Ethereal 0.9.7
===========
frame.time_delta lt 0      (3,5,7,12,17,21,24,26,28 ....)   OK!
frame.time_delta ge 0   (1,2,4,6,8,9,10,11,13,14,15,16,18 ...)   OK!
frame.time_delta eq 0   (1)  OK!
frame.time_delta ne 0    (2,3,4,5,6,7,8,9,10,11,12,13,14 ....) OK!
frame.time_delta gt 0     (2,4,6,8,9,10,11,13,14,15,16,18,19,20) OK!

(3,5,7,12,17,21,24,26,28 are shown with negative time for "Time delta from previous packet")