How can i know how much time it took to file to get downloaded with wireshark.

HI all ,

I downloaded a file and in wireshark i saw the GET request of the filename , i want to know how much time it took to the file to get downloaded to my computer . How can i see that throw wireshark ,

can anyone please help me ?

download timestamp

asked 05 Mar '13, 07:16

Alon Fox
5●1●2●5
accept rate: 0%

2 Answers:

active answers oldest answers newest answers popular answers

There are several ways to do that, depending on the accuracy you need.

most accurate method

find the HTTP GET that requests the file. Filter: http.request.uri contains file.exe
right click that packet and select "Follow TCP Stream"
then find the first data packet (from the server) in that stream, that belongs to the specific GET request. Please remember how HTTP/1.1 works. There may be several consecutive requests in one TCP connection. The response data from the server (downloaded content) will appear in the same order.
set a time reference on that packet (CTRL-T)
Find the last data packet that belongs to that download (the one with 'HTTP/1.x 200 OK' in the info column)
The time you see for that packet in the Time column, is your 'download time'

Regards
Kurt

permanent link

answered 05 Mar '13, 10:32

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

When you just need an approximate number fast in a capture where the flow you care about is the biggest one: Go to Statistics -> Conversation List -> TCP, click the "Bytes" column twice to sort decreasing, and then look at the "Duration" value for the top row.

permanent link

answered 06 Mar '13, 18:56

rakslice
9●1●1●5
accept rate: 0%

edited 06 Mar '13, 18:56

That will not show the download time of a single object if HTTP/1.1 was used. It will show the duration of the TCP connection which could have been used to download several objects!

(07 Mar '13, 02:51) Kurt Knochner ♦

Your answer

toggle preview

community wiki:

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Question tags:

timestamp ×62
download ×36

question asked: 05 Mar '13, 07:16

question was seen: 10,701 times

last updated: 07 Mar '13, 02:52

How can i know how much time it took to file to get downloaded with wireshark.

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions