Hello, Is there a way to create a display or color filter that would show delta time between frames from the same source IP. Without first filtering on 1 source IP, I'm looking at UDP/RTP packets. I'm trying to display gaps in transmitted data from a given source, having both directions src/dst in the pcap. Thank you.... asked 08 May '15, 07:57  Raf |
One Answer:
Within TCP you can enable "Conversation Timestamps" which will show you the time since the first packet in the TCP session and also the time difference between this packet and the previous packet in the TCP session. This has not been implemented in other protocols. So for UDP/RTP packets, there is no out-of-the-box way to do it. However, you should be able to do this with either MATE or LUA answered 08 May '15, 08:15  SYN-bit ♦♦ |
