Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Two new timestamp columns

From: Sake Blok <sake@xxxxxxxxxx>
Date: Wed, 3 Oct 2007 16:06:18 +0200
Hi All,

In SVN 22966 I added support for timestamps relative to the tcp-stream. 
To be able to view those timestamps as a column in the packet-list pane, 
I now added support for "conversation-timestamps" (SVN 23058). I have 
chosen to make this not tcp-specific, but general to all kinds of 
conversations. The tcp dissector is just the first one to use it.

I have added two new column types:
- COL_REL_CONV_TIME which is used to display the time relative to the 
  first frame that was seen in the conversation
- COL_DELTA_CONV_TIME which is used to display the delta time from the 
  previous frame of the conversation

I have added the function "col_set_time()" to "epan/column-utils.[ch]" 
which can be called from within a dissector to set either of these two 
columns to the appropiate time.

In order for the user to be able to select which protocol should provide 
the conversation timestamps to these columns there must be a preference 
in each dissecter (that uses conversation timestamps) to turn 
conversation timestamps off (to prevent higher level protocols to 
overwrite the timestamps of lower level protocols).

If no one objects to these changes and/or the way they had been 
implemented, I will implement conversation timestamps for the udp 
dissector in the near future and will update README.developer with 
the information above.

Cheers,


Sake