This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

difference in the output: tshark Vs Wireshark results

0

Installed the 1.5.0 build and I see scsi,rtt commandline arguments. There is a difference in the output compared to UI. Is this a known issue?

Via CLI started the capture interface: - tshark -S -i 2 -w capture_out.pcap - tshark -r capture_out.pcap -q -z scsi,rtt,0

returns avg SRT value: 0.021678.

Via UI capture,

  • Started the capture interface via UI
  • send some traffice
  • View the statistics: Statistics->Service Response Time->SCSI->Filter<iscsi.time> returns: Avg SRT value: 0.081465.

Which avg SRT is correct, UI or CLI? Yes, I've made sure I start the capture trace first before i send data.

Any help is appreciated.

asked 20 Mar '11, 18:07

asif's gravatar image

asif
1●5●5●6
accept rate: 0%

edited 20 Mar '11, 18:21

1

Are you gathering statistics using the same capture file for both tshark and Wireshark? It seems as if you are not comparing apples to apples.

(21 Mar '11, 07:00) cmaynard ♦♦

One Answer:

1

What statistics are generated by Wireshark if you load the data captured by tshark?

Anything else is going to be, as asif noted, apples and oranges. Response time can vary significantly from one moment to the next.

answered 21 Mar '11, 15:26

wesmorgan1's gravatar image

wesmorgan1
411●10●12●21
accept rate: 4%