I am sending traffic from one computer to another and capturing the packets using wireshark, i need to calculate the waiting time between sending a packet and receiving the acknowledgment to that packet but i can't find the sending time and receiving time of each packet ..any help?? Noting that: what i understand is that the time stamp is the time at which the packet was captured not sent/received so i couldn't use it. asked 26 Apr '15, 14:15  yas1234 closed 26 Apr '15, 14:57  grahamb ♦ |
The question has been closed for the following reason “Duplicate Question” by grahamb 26 Apr ‘15, 14:57
One Answer:
You can't find the sending and receiving times because they are not in the packets. As. You've noticed, the capture time is what Wireshark records. The capture time is the same as the receiving time on the capture system. To get the time between sending a packet and receiving a reply, you need to capture on the sending system, or as close to it as possible, so that the capture times correspond to the sending and receiving times. answered 26 Apr '15, 14:29  Jim Aragon |
This is effectively the same question as you asked previously: https://ask.wireshark.org/questions/41776/thinking-time-and-waiting-time-delay-tcp where the answer I gave was very similar to that which @Jim Aragon as supplied here.
Please don't raise another question if you don't feel your original has been answered correctly, instead add amplifying comments to that question or its answers.