Hi, In Wireshark, can I add a column which indicates diff between two other columns of same/diff packet? For ex: In a packet I see two fields: Timestamp-1 & Timestamp-2. Now I can add them as two columns. And I want third column = Timestamp-2 - Timestamp-1. Please let me know if it's possible? Regards, Ramprasad asked 16 Dec '14, 09:12 Ramprasad |
2 Answers:
No, you can't add custom columns that do calculations on frame contents, you can only display values that are already available in the packets. answered 16 Dec '14, 09:18 Jasper ♦♦ |
I had to do something similar, had to export the captures to CSV for analysis in excel. answered 19 Dec '14, 11:26 Ziggy |