This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Tshark - average time

0

I have a large pcap file with a lot of Solicit, advertise, request and reply packets. I would like to calculate average time of address assignment. In this file is for example 100000 solicit packets but only 50000 reply packets - so only 50000 address is assigned. Is it possible to count average time of real address assignments? I have tried with: tshark -n -q -z 'io,stat,0,AVG(frame.time_relative)frame.time_relative' but with no effect.

asked 30 Dec '15, 15:40

razz9's gravatar image

razz9
6222
accept rate: 0%

can you please define what you mean by "address assignments" and "real address assignments" ?

(09 Jan '16, 12:18) Kurt Knochner ♦