Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] frame.delta_time display filter question

Date: Tue, 15 May 2007 10:27:32 -0400
Hi,

I tried the latest build of Wireshark and it’s solved my issue.  Thanks guys for maintaining such a great tool. 

“I wish every tools I’m using was as good as Wireshark, this one is simply the best.” 

===========================================
André Noël
Analyste principal - protocoles
Bell Canada / Groupe Exploitation

-----Message d'origine-----
De : wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] De la part de Sake Blok
Envoyé : May 15, 2007 9:39
À : Community support list for Wireshark
Objet : Re: [Wireshark-users] frame.delta_time display filter question

On Tue, May 15, 2007 at 09:11:13AM -0400, andre.noel@xxxxxxx wrote:
> 
> I'm using Wireshark 0.99.5  and I wanted to isolate any frame which the delta from the previous is more
> 
> than 5 seconds so I used this display filter:  frame.time_delta > 5   but it doesn't look to work I got
> 
> erroneous results.  Can it be caused by the fact of the calculation is from the display and as the display refreshes 
> 
> during the filter parsing ?

Yes, you are correct, the filter "frame.time_delta > 5" will display all
frames that have a timestamp more than 5 seconds later than the 
previously *displayed* frame and not since the previously *captured* frame.

> Anyone already used it ?  If it was working it has been a really powerfull and fast way to isolate or find where delays are.

Actually this was solved in a recent bugfix. If you download a recent
buildbot build of Wireshark, you have two following fields:

- frame.time_delta -> time_delta since previous *captured* frame
- frame.time_delta_displayed -> time_delta since previous *displayed* frame

You can also select the two variants as columns.

Hope this helps,  Cheers,


Sake
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users