This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Delta Time Between Packets with the Same Source IP

0

Hello,

Is there a way to create a display or color filter that would show delta time between frames from the same source IP. Without first filtering on 1 source IP, I'm looking at UDP/RTP packets.

I'm trying to display gaps in transmitted data from a given source, having both directions src/dst in the pcap.

Thank you....

asked 08 May '15, 07:57

Raf's gravatar image

Raf
6112
accept rate: 0%


One Answer:

0

Within TCP you can enable "Conversation Timestamps" which will show you the time since the first packet in the TCP session and also the time difference between this packet and the previous packet in the TCP session.

This has not been implemented in other protocols. So for UDP/RTP packets, there is no out-of-the-box way to do it.

However, you should be able to do this with either MATE or LUA

answered 08 May '15, 08:15

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%