Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Regarding to the version 1.8.1 & 2.2.4, we experience the huge

From: Leong Kah Jun <leong.kah.jun@xxxxxxxxxx>
Date: Thu, 16 Feb 2017 05:11:36 +0000

 

Hi Wireshark

 

Issue background: We found the delta duration for both version is having huge difference as the diagram shown below.

cid:image013.jpg@01D2876E.CC041E60

 

Through the finding from my side

 

The different of the version shown the different result

 

Version1.8.1

cid:image005.png@01D28771.85797730

Version 2.2.4

cid:image006.png@01D28771.85797730

 

Here is the analyze from (version 2.2.4)

1.It show 65.2 upload packet loss and 23.6%packet loss.

cid:image013.jpg@01D2876E.CC041E60

 

Example when we observe the delta ms during this time which is sequence 32562 to 32563. The different between the duration is only 121ms. But here written 59719 delta ms.

Thus I suspect the 2.2.4 version of the wireshark have some error while analyze the RTP packet

cid:image012.png@01D28776.4D7241F0

cid:image011.png@01D28777.9B639B60

 

2. Same log has been analyze from above but the wireshark version is(version 1.8.1). The result shown 0% packet loss for both download and upload

cid:image009.jpg@01D2876E.CC041E60

Apparently we could observe that the duration for the sequence 32564 shall be 19ms. Thus We can calculate the duration difference between 32563 and 32564

cid:image013.png@01D28775.CE1E2090

 

778ms-657ms= 121ms. Thus the info is consistent compare with the wireshark download from the official website

cid:image015.png@01D2877F.BFDDB4A0

 

Conclusion:

There is a huge difference between the tools being used. I suspect the tools for version 2.2.4 has some error when analyzing the delta duration for every RTP packets. I need wireshark’s team advice to confirm us which version is showing correct result. Perhaps there is other way to verify every RTP packets delta duration on version 2.2.4

 

I hope to get your feedback in soon.

 

Attached here is the log I have been analyze.

 

Thanks

 

Best Regards

 

Leong Kah Jun, Admission test Huawei Device

 

Attachment: Log1_2.13pm_29min17sec_Austin V100R001C20B210SPC007_ips_ccore.cap
Description: Log1_2.13pm_29min17sec_Austin V100R001C20B210SPC007_ips_ccore.cap