This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to get Retransmission Timeout value in a custom column?

0

I am trying to get the RTO in a custom column but it doesn´t work, also I can´t find the value manualy. In several tutorials the value is at "Transmission Control Protocol" -> "SEQ/ACK Analysis" -> "TCP Analysis Flags" -> "Expert Info" . But there is no "TCP Analysis Flags". So I tried another way. . .
https://www.wireshark.org/docs/dfref/t/tcp.html
I added a new column at Column-Preferences:
- FIELD NAME -> tcp.analysis.rto
- TYPE -> custom
But it stays empty. I am out of ideas.

greetings peacemaker

asked 28 Dec '16, 15:21

peacemaker's gravatar image

peacemaker
11225
accept rate: 100%

edited 28 Dec '16, 16:17

Bob%20Jones's gravatar image

Bob Jones
1.0k2515


One Answer:

0

It seems to work OK for me, as shown:

alt text

with

alt text

Do you actually have retransmissions for an RTO to be measured? Otherwise, I find this field will be blank.

answered 28 Dec '16, 16:03

Bob%20Jones's gravatar image

Bob Jones
1.0k2515
accept rate: 21%

I created another file with trpt (transliterate protocol trace) there I got rxtcur (current retransmit value). But that file was rly huge and I wanted wireshark do all the work for me, so I spend a whole hour trying to get this goin. And in the end there were no retransmissions.

I thought I could get the current retransmit value sorted by wireshark but I guess my TCPdump didn´t contain that information ... time well spend I´d say

(28 Dec '16, 16:44) peacemaker