This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to add custom Column?

0

Hi,

In Wireshark, can I add a column which indicates diff between two other columns of same/diff packet?

For ex:

In a packet I see two fields: Timestamp-1 & Timestamp-2. Now I can add them as two columns. And I want third column = Timestamp-2 - Timestamp-1. Please let me know if it's possible?

Regards, Ramprasad

asked 16 Dec '14, 09:12

Ramprasad's gravatar image

Ramprasad
20101115
accept rate: 0%


2 Answers:

1

No, you can't add custom columns that do calculations on frame contents, you can only display values that are already available in the packets.

answered 16 Dec '14, 09:18

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

0

I had to do something similar, had to export the captures to CSV for analysis in excel.

answered 19 Dec '14, 11:26

Ziggy's gravatar image

Ziggy
11112
accept rate: 0%