This is our old Q&A Site. Please post any new questions and answers at

HI all ,

I downloaded a file and in wireshark i saw the GET request of the filename , i want to know how much time it took to the file to get downloaded to my computer . How can i see that throw wireshark ,

can anyone please help me ?

asked 05 Mar '13, 07:16

Alon%20Fox's gravatar image

Alon Fox
accept rate: 0%

There are several ways to do that, depending on the accuracy you need.

most accurate method

  • find the HTTP GET that requests the file. Filter: http.request.uri contains file.exe
  • right click that packet and select "Follow TCP Stream"
  • then find the first data packet (from the server) in that stream, that belongs to the specific GET request. Please remember how HTTP/1.1 works. There may be several consecutive requests in one TCP connection. The response data from the server (downloaded content) will appear in the same order.
  • set a time reference on that packet (CTRL-T)
  • Find the last data packet that belongs to that download (the one with 'HTTP/1.x 200 OK' in the info column)
  • The time you see for that packet in the Time column, is your 'download time'


permanent link

answered 05 Mar '13, 10:32

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
accept rate: 15%

When you just need an approximate number fast in a capture where the flow you care about is the biggest one: Go to Statistics -> Conversation List -> TCP, click the "Bytes" column twice to sort decreasing, and then look at the "Duration" value for the top row.

permanent link

answered 06 Mar '13, 18:56

rakslice's gravatar image

accept rate: 0%

edited 06 Mar '13, 18:56

That will not show the download time of a single object if HTTP/1.1 was used. It will show the duration of the TCP connection which could have been used to download several objects!

(07 Mar '13, 02:51) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 05 Mar '13, 07:16

question was seen: 11,237 times

last updated: 07 Mar '13, 02:52

p​o​w​e​r​e​d by O​S​Q​A