This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Relative Frame Number

0

Like most people I imagine, I have a frame number column in my preferred view. I also frequently use the very handy tcp.stream filter to isolate a particular connection. I have noticed that when I do this, I often would like the frame number to be relative to the stream I am filtered on. But the frame number column seems to be "absolute", so there are gaps in the sequence of frame numbers if there is more than one stream in the trace file.

Is there a "relative frame number" column I'm just not aware of that I could add to my view so that packets in a given stream are numbered relative to the stream?

Thanks!

asked 02 Jun '16, 06:23

smp's gravatar image

smp
394510
accept rate: 0%

edited 02 Jun '16, 06:24


One Answer:

1

I don't think Wireshark keeps a relative frame number per TCP conversation as a field, so you can't display it in a column. You might want to add a feature request at https://bugs.wireshark.org for this.

answered 02 Jun '16, 06:30

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Thanks for the confirmation!

(02 Jun '16, 11:07) smp

For reference, here's the bug report URL:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12491

As far as I can tell the next dev builds will already have that feature.

(02 Jun '16, 13:07) Jasper ♦♦