This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

The Tcp packet in wireshark has a timestamp option, TSval and TSecr, after googling for a while i understand that TSval is the value of the tcp clock of the sender, right? ...now if i am tracing the packets in wireshark in order to calculate the time between sending a packet and receiving the acknowledgement between each 2 packets, i need the time at which the packet was sent and the time at which the next packet(the ack pkt) was received ..at the same node .. how do i calculate that?? and is the time at which the pkt was sent = TSval ? .. if so, then how do i get the time at which i received the ack packet??

noting that i'm doing this capture and calculation on one computer (the client) thinking it'll be easier, but if i will need to include the receiving computer let me know.

asked 05 May '15, 08:14

yas1234's gravatar image

yas1234
16182023
accept rate: 0%


You can use the "Time" column in Wireshark to display the times at which the capture mechanism used on your OS recorded the transmission of the request and the ack of packet.

You can also set the request packet as a "Time Reference" by right clicking the packet in the packet list and selecting "Set Time Reference", accepting the change of time format if Wireshark asks, and then the Time column will directly show the response time for the ack relative to the request.

permanent link

answered 05 May '15, 08:44

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

do you mean the pcap file record timestamp if i'm capturing near the sender side ?

(05 May '15, 08:58) yas1234

Yes that's correct. Note that it's only as accurate as the capture mechanism used.

(05 May '15, 09:00) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×752
×238
×62

question asked: 05 May '15, 08:14

question was seen: 8,211 times

last updated: 05 May '15, 09:00

p​o​w​e​r​e​d by O​S​Q​A