Does anyone know of a way to take a packet capture and plot TCP sequence numbers against timestamp option values?
asked 07 Dec '14, 11:56
You could try the standard TCP Stream Graph, maybe that's "good enough" for your purpose.
Please be aware, that you will get different graphs, if you choose a frame from C->S versus S->C!
If you really need a graph the the TCP timestamp option, you'll have to create the graph yourself.
Please replace "display filter" with the wireshark display filter you need to extract data from the right connection in the pcap file.
Then take that output and feed it into Excel or another spreadsheet software to create the graph.
answered 08 Dec '14, 05:12
Kurt Knochner ♦
edited 08 Dec '14, 05:13