ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] Strange Delta Time

From: Alexandre Aeschbach <lex@xxxxxxxxxxx>
Date: Wed, 21 Jan 2009 15:46:58 +0100
Hi Frank,

you could try to change the delay of your generated packets by 10ms (to 26ms) and record a new trace. Then you could check if the delta of 10ms is visible in the captured data after this change.

Just to see if the timestamp is recognized correctly.

Regards,

Alex

Frank Pall schrieb:
Hi and thanks for your reply,
i attach the capture file related in which you will be able to see the strange delta time value. Please remember that in my software i can see a delta time=16ms,while in wireshark i see a strange 5ms delta time.

----- Original Message -----
Date: Tue, 20 Jan 2009 01:05:29 +0100
From: "Sake Blok" <sake@xxxxxxxxxx <http://us.mc591.mail.yahoo.com/mc/compose?to=sake@xxxxxxxxxx>>
Subject: Re: [Wireshark-users] Fw: Re:  Strange Delta Time

Frank,

Is the capture file in libpcap format? Or did you make it with another tool that uses a different file format? If you did not make the capture file with wireshark (or tshark), could you run capinfos on it? Capinfos is included in the wireshark distribution, use it like "capinfos <file>".

The reason I'm asking is that maybe wiresharks import routine for this file format is not getting the timestamps right.

Cheers,


Sake

------------------------------------------------------------------------

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe