I'm running two versions of Wireshark on my machine. v1.8.14 (because it supports a no longer supported protocol) and v2.0.3 (portable version) I'm trying to do a timing analysis on packets over the network and finding the I/O Graph function handy. However, I find myself having to simultaneously run both versions of Wireshark to get what I need! 1.8.14 is good for looking at the details. The time scale is stretched and I have to do a lot of scrolling to see all of the data, but it gives me a really good, up close picture. Unfortunately, I can't "zoom out" to see the big picture. Also, it's limited to 100,000 sample points. 2.0.3 is the opposite. I get a great "high level" picture of the entire capture. It has a built-in zoom feature which seems nice - I can use my mouse wheel to zoom. The only problem is, it zooms the packets/s axis as well as the time! So when I zoom in to get the time scale right, now the packet scale is way off and I have to scroll a long way up to see the points I want! Is there a way in 2.0.3 to just zoom the time axis and leave the Packets/s axis alone? Or, less preferably, a way to "zoom out" in 1.8.14? asked 15 Jun '16, 06:06  Trashman |
One Answer:
With 2.1.0 (development snapshot of upcoming 2.2) at least I'm capable of selecting a certain piece of the graph and have that zoomed in. That gives me free choice of X and Y axis. Lacking a mouse wheel I can't test further, but do modifier keys (Shift, Ctrl, Alt) have any influence on the axis selected for zoom? answered 15 Jun '16, 06:39  Jaap ♦ Modifier keys do not make a difference. But, I figured it out. At the bottom, I have to change Mouse: drags to Mouse:zooms, then I can highlight what I need and zoom in to exactly what I want as you described. (15 Jun '16, 10:01) Trashman |
Which protocol is no longer supported in 2.0?
MODBUS over UDP was dropped in 1.10 and later because it is a nonstandard protocol.