This is our old Q&A Site. Please post any new questions and answers at

Hi everybody,

I'm new user in wireshark. I have 2 ip address (client and server), i need to determine the connection time and the respond time between the 2. is it the tcp delta time?

Thank you for your help.

asked 30 Mar '15, 01:39

hub's gravatar image

accept rate: 0%

Without a clear definition of "connection time" and "response time", I can only guess what you are asking for, so here is my first attempt.

connection time:

If you are interested in the time between SYN and SYN ACK, or the time it takes for the three-way handshake, you can set a time reference on the SYN flag (click on the frame and press CTRL-T) and then look at the timestamp of SYN-ACK or the timestamp of the first data frame. See (1) and (2) in the screenshot below.

response time:

This can be virtually anything, from RTT analysis at TCP level up to response time for a HTTP GET. See (3) (time reference for GET) and (4) answer from server (some tools call this "first byte") and (5) final frame of the answer (wireshark shows the HTTP answer in the info field in the last frame.

alt text


permanent link

answered 30 Mar '15, 03:57

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
accept rate: 15%

edited 30 Mar '15, 09:48

Thank you so much

(30 Mar '15, 08:52) hub

You're welcome!

(30 Mar '15, 08:54) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 30 Mar '15, 01:39

question was seen: 2,166 times

last updated: 30 Mar '15, 09:48

p​o​w​e​r​e​d by O​S​Q​A