This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

http.response_ts filter

0

Im running Version 1.10.8 (v1.10.8-2-g52a5244 from master-1.10) but I see no http.response_ts filter ?

asked 24 Jun '14, 03:43

bart80's gravatar image

bart80
11●12●13●16
accept rate: 0%

edited 24 Jun '14, 06:03

Hadriel's gravatar image

Hadriel
2.7k●2●9●39

One Answer:

1

It was changed to "http.time" to match similar fields of other protocols, in rev 49630.

answered 24 Jun '14, 06:02

Hadriel's gravatar image

Hadriel
2.7k●2●9●39
accept rate: 18%

edited 24 Jun '14, 06:02

Thanks, Ive tried using this link https://www.lcuportal2.com/blog-in-lauras-lab/entry/welcoming-wireshark-110rc1-http-response-time.html with the http.time but it doesnt appear to show anything. Am i missing something to graph the server http response times... ?

(24 Jun '14, 08:52) bart80

It works for me, using http.time. Are you sure you're capturing HTTP traffic instead of HTTPS?

(24 Jun '14, 09:03) Hadriel

Capture an image of your graph, post it somewhere public, e.g dropbox, Google Drive etc. and share a link to the image back here.

(24 Jun '14, 09:09) grahamb ♦

I think this issue could be down to the maximum number of packets that wireshark is analyzing in the IO graph. Is there a way of change this ?

Thanks,

(25 Jun '14, 02:20) bart80

There is no maximum number of packets as far as I know, unless you mean max number of entries in the graph (which I think might be limited to 100,000 entries). But if you hit that limit it should pop up a dialog box telling you it was hit.

Try this first: close the io graph and get back to the normal wireshark display, then apply a display filter for "http.time", and then see if any packets are displayed in the main window with that filter set.

(25 Jun '14, 09:41) Hadriel