Can anyone please explain me what a wireshark user can achieve setting these parameters separately? Seconds since beginning of the capture Seconds since previous captured packet Seconds since previous displayed packet The first option is straight forward but i would like to know the difference between displayed packet vs captured packet. Thanks in Advance asked 25 Feb '13, 12:21  krishnayeddula |
One Answer:
Using the display filters you can (temporarily) remove frames from display. The 'Seconds since previous displayed packet' setting makes it so that the times presented on the displayed frames are the times between those displayed frames, not taking into account the frames removed from display. answered 25 Feb '13, 13:59  Jaap ♦ |
Assume that i didn't sorted out any packets(not applied any display filter) in that case will seconds since previous displayed packet is equal to seconds since previous captured packet?
If there's no display filter, captured packets and displayed packets are the same, so, yes, seconds since previous displayed packet will be equal to seconds since previous captured packet.
Thanks Guy and Jaap.
@kserasera: If you like the answer and accept it, please click the tick besides the answer, so it's marked that way.