This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Print duration of each tcp flows

0

I have a pcap of TCP flows. I want to know which flow last longest. So I am seeking a way to print duration of each TCP flow.

Thank in advance

asked 09 Mar '17, 21:19

fucai1116's gravatar image

fucai1116
6113
accept rate: 0%


One Answer:

4

Go to "Statistics - Conversations", select "TCP" and sort by "Duration" column:

alt text

Then if needed you can right click on the flow, select "Apply as filter - selected - A <--> B" and see this flow in main Wireshark window.

answered 09 Mar '17, 23:41

Packet_vlad's gravatar image

Packet_vlad
4361613
accept rate: 20%

edited 09 Mar '17, 23:47