This is our old Q&A Site. Please post any new questions and answers at


Is there a way to create a display or color filter that would show delta time between frames from the same source IP. Without first filtering on 1 source IP, I'm looking at UDP/RTP packets.

I'm trying to display gaps in transmitted data from a given source, having both directions src/dst in the pcap.

Thank you....

asked 08 May '15, 07:57

Raf's gravatar image

accept rate: 0%

Within TCP you can enable "Conversation Timestamps" which will show you the time since the first packet in the TCP session and also the time difference between this packet and the previous packet in the TCP session.

This has not been implemented in other protocols. So for UDP/RTP packets, there is no out-of-the-box way to do it.

However, you should be able to do this with either MATE or LUA

permanent link

answered 08 May '15, 08:15

SYN-bit's gravatar image

SYN-bit ♦♦
accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 08 May '15, 07:57

question was seen: 3,533 times

last updated: 08 May '15, 08:15

p​o​w​e​r​e​d by O​S​Q​A