This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to read for example the following frame.time_delta between 2 packets

0
176 Jul 25, 2016 01:10:16.993463000 CEST    0.000424000 23.6.1.111  23.4.1.10
177 Jul 25, 2016 01:10:16.994604000 CEST    0.001141000 23.4.1.10   23.6.1.111

tshark -r r.pcap -T fields -E header=y -e frame.number -e frame.time -e frame.time_delta -e ip.src -e ip.dst | awk '{print $7}' > RRT

e=0 while read p; do let e=$e+$p; done < RRT echo $e 0.16371100000000005

$e here means 164 ms??

Thanks!

asked 24 Jul ‘16, 19:06

ppcap's gravatar image

ppcap
16337
accept rate: 50%

edited 26 Jul ‘16, 04:06


One Answer:

0

0.001141000 0.001 == 1 ms 0.0001 == 100 micro 0.000141000 === 141 microsec 0.000000100 === 100 nanosec 0.000000001 === 1 nanosec

answered 26 Jul '16, 04:06

ppcap's gravatar image

ppcap
16337
accept rate: 50%