This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello,

Is there a way to create a display or color filter that would show delta time between frames from the same source IP. Without first filtering on 1 source IP, I'm looking at UDP/RTP packets.

I'm trying to display gaps in transmitted data from a given source, having both directions src/dst in the pcap.

Thank you....

asked 08 May '15, 07:57

Raf's gravatar image

Raf
6112
accept rate: 0%


Within TCP you can enable "Conversation Timestamps" which will show you the time since the first packet in the TCP session and also the time difference between this packet and the previous packet in the TCP session.

This has not been implemented in other protocols. So for UDP/RTP packets, there is no out-of-the-box way to do it.

However, you should be able to do this with either MATE or LUA

permanent link

answered 08 May '15, 08:15

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×6
×6
×2

question asked: 08 May '15, 07:57

question was seen: 3,411 times

last updated: 08 May '15, 08:15

p​o​w​e​r​e​d by O​S​Q​A