This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Time Filter = t+tau

Hi,

I want to create a filter where it capture packet from X time to X+10 secs Example: The packet i click, it take its time and add 10 secs to its time and show only those packets that are only in this time range.

Scope_: * How i can get automatically the time of packet where i click. %%frame.time is static if i save the filter. i need to create dynamic filter * How to add 10 secs from above mentioned time

Thanks

frame.time

asked 27 Jan '16, 02:19

mi121647
6●1●1●2
accept rate: 0%

One Answer:

The highest degree of automation I know about is the following:

click the packet in the packet list pane
in packet dissection pane, unfold the frame layer
right-click the Arrival Time or Time since reference or first frame line, whichever suits your way of thinking better (but the latter is easier to increase by your desired τ value), and choose Apply as Filter -> Selected from the context menu
do the same again, except that you choose Apply as Filter -> ...and Selected
manually modify the two == in the display filter field to >= and <= and add τ to the correct one
re-apply the display filter

answered 27 Jan '16, 03:36

sindy
6.0k●4●8●51
accept rate: 24%

Thank you Sindy,

Yes you are right. But i want to automate beyond the above mentioned solution.

(27 Jan '16, 04:10) mi121647

Sounds like you need a compiler and the source code then ;-)

(27 Jan '16, 04:33) Jasper ♦♦

Thanks Jasper, I am beginner. can you guide me to some thread/ thing where i get guidance on it :)

(27 Jan '16, 06:01) mi121647