This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Zooming on capture file

0

Hi all Lets say I have a large capture file from my network and I would like to zoom on a specific period of time on the capture. How can I do it with wireshark, it seams that the IO Graphs is very basic. If it is not possible, can someone advice for a tool which can do it? Thanks

asked 25 Oct '10, 13:50

ron's gravatar image

ron
1111
accept rate: 0%


3 Answers:

0

Pilot does this beautifully - you just click and drag over a section of the graphs and then select to open the packets in Wireshark. See www.cacetech.com for more information.

In Wireshark you can create a display filter that will show packets between certain times - for example, frame.time_relative > 0 && frame.time_relative < 4. This displays all packets that arrived in the first four seconds of the trace file.

answered 25 Oct '10, 14:02

lchappell's gravatar image

lchappell ♦
1.2k2730
accept rate: 8%

0

Right, Pilot does it well , I came across a tool today found on softpedia Which also does it , it is kind of new but it looks good. Maybe it will help you.

http://www.softpedia.com/get/Network-Tools/Network-Testing/CapsGraph.shtml

answered 26 Oct '10, 04:25

mitusjosh's gravatar image

mitusjosh
1
accept rate: 0%

Installed CapsGraph, but it crashes immediately upon load. Lost patience and dumped it... have you run it successfully?

(26 Oct '10, 09:25) lchappell ♦

Yes it worked, but you need to install Microsoft .NET Framework 3.5 and then install Microsoft Chart Controls, the links are at the site, it works fine looks cool just what I was looking for. Maybe you need to restart your pc after installing the Microsoft .NET Framework 3.5 and Microsoft Chart Controls

(26 Oct '10, 12:55) ron

Installed both, but it just died... will restart a few more times for good measure <g>. Thanks!

(26 Oct '10, 13:07) lchappell ♦

0

it works when you install Microsoft .NET Framework 3.5 SP1

answered 27 Oct '10, 01:06

mitusjosh's gravatar image

mitusjosh
1
accept rate: 0%