Hi, We have been tracking through issues with our dhcp server and we need to measure dhcp response times, but all my google-fu seems to be failing me... I've looked though the wireshark bootp/dhcp sections and nothing seems to specifically measure dhcp response times but you'd think surely it's something not uncommon to want to perform. Ideally I'd want to graph it as part of an IO graph. Has anyone done this? Is there a wireshark lua plugin I can add? Thanks, Glen. This question is marked "community wiki". asked 30 Jun '16, 19:26  glenp42 |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
I can't help you directly, but this post from years ago is basically the same request:
https://ask.wireshark.org/questions/241/tcp-and-others-response-times
Someone with Lua expertise can probably help you to do it within Wireshark, but here is another link where someone developed a tool in Perl to do it:
http://indcontrolproto.blogspot.com/search?updated-min=2013-01-01T00:00:00-08:00&updated-max=2014-01-01T00:00:00-08:00&max-results=3
I know this method and it uses Excel or another graphing package to create the charts. Not exactly what you want, and this execution is for ModbusTCP but it is a view of how others have solved your same issue starting from a packet capture.
Another hint, rather than an Answer, would be to use MATE to group the DHCP requests (discovers etc.) with corresponding responses (offers, acknowledges etc.) and to let the graph show the MATE GoP durations. As compared to @Bob Jones' suggestion, mine requires to learn a quite niche feature of Wireshark, but it allows the whole solution including drawing the graph to remain within Wireshark.