This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How can i know how much time it took to file to get downloaded with wireshark.

1

HI all ,

I downloaded a file and in wireshark i saw the GET request of the filename , i want to know how much time it took to the file to get downloaded to my computer . How can i see that throw wireshark ,

can anyone please help me ?

asked 05 Mar '13, 07:16

Alon%20Fox's gravatar image

Alon Fox
5●1●2●5
accept rate: 0%

2 Answers:

3

There are several ways to do that, depending on the accuracy you need.

most accurate method

  • find the HTTP GET that requests the file. Filter: http.request.uri contains file.exe
  • right click that packet and select "Follow TCP Stream"
  • then find the first data packet (from the server) in that stream, that belongs to the specific GET request. Please remember how HTTP/1.1 works. There may be several consecutive requests in one TCP connection. The response data from the server (downloaded content) will appear in the same order.
  • set a time reference on that packet (CTRL-T)
  • Find the last data packet that belongs to that download (the one with 'HTTP/1.x 200 OK' in the info column)
  • The time you see for that packet in the Time column, is your 'download time'

Regards
Kurt

answered 05 Mar '13, 10:32

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

0

When you just need an approximate number fast in a capture where the flow you care about is the biggest one: Go to Statistics -> Conversation List -> TCP, click the "Bytes" column twice to sort decreasing, and then look at the "Duration" value for the top row.

answered 06 Mar '13, 18:56

rakslice's gravatar image

rakslice
9●1●1●5
accept rate: 0%

edited 06 Mar '13, 18:56

That will not show the download time of a single object if HTTP/1.1 was used. It will show the duration of the TCP connection which could have been used to download several objects!

(07 Mar '13, 02:51) Kurt Knochner ♦