Hi, I would like to plot the variations in One Way Delays (instead of RTTs) of a TCP connection. Assume that I have recorded one pcap on the client and one pcap on the server and that both nodes are perfectly in sync, is there any software that could plot the one way delays ? Regards asked 21 Mar '16, 05:39  teto |
One Answer:
From my Point of view the key for success is the exact time stamping during capturing. For that you should specialized capture cards. How to do the analysis in wire sharks itself is described here: https://blog.packet-foo.com/2015/02/working-with-multi-point-captures/ answered 21 Mar '16, 06:15  Christian_R |
Thanks for your answer. I can affirm my nodes are perfectly syncronized because the pcaps are generated by the discrete time simulator ns3 (www.nsnam.org). I am looking for a tool to automate the generation of OWD plots, otherwise I will have to write one myself. From your linked post, they suggest to use proprietary software but I am on linux and it's not clear from their websites if they support the OWD plotting I am looking for.
Ok either you use the tools described there at the end of you have write some scripts or merge the pcaps. Maybe the IP.ID could be the key to match the correlating packets.