This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I would like to get the http.time as the time between the first packet of the request and the first packet of the response. On this question they say it is possible to be done with wireshark by disabling TCP reassembly , but, how can I do it with CLI tshark, there is no information about this on the manpage.

Thanks in advance

asked 10 Jul '16, 14:51

carlosvega's gravatar image

carlosvega
26112
accept rate: 100%

edited 10 Jul '16, 15:05


I just found it

-o tcp.desegment_tcp_streams:false
permanent link

answered 10 Jul '16, 15:05

carlosvega's gravatar image

carlosvega
26112
accept rate: 100%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×832
×752
×293
×7

question asked: 10 Jul '16, 14:51

question was seen: 2,113 times

last updated: 10 Jul '16, 15:05

p​o​w​e​r​e​d by O​S​Q​A