Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] frame.delta_time display filter question

From: "Bill Meier" <wmeier@xxxxxxxxxxx>
Date: Tue, 15 May 2007 09:30:55 -0400
andre noel wrote:
> I´m using Wireshark 0.99.5 and I wanted to isolate any frame which the delta
> from the previous is more
> than 5 seconds so I used this display filter: frame.time_delta > 5 but it
> doesn´t look to work I got
> erroneous results. Can it be caused by the fact of the calculation is from
> the display and as the display refreshes
> during the filter parsing ?
>

This issue has been addressed in work done after wireshark 0.99.5 was
released.
(See http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=491).

In the current wireshark there are now actually two filters:

frame.time_delta             ; delta since last captured frame
frame.time_delta_displayed   ; delta since last displayed frame

If you are running on Windows, you can obtain a recent development version of
wireshark from http://www.wireshark.org/download/automated/win32/

or: you can wait until wireshark 0.99.6 is released.

Bill