This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Absolute time and time resolution in tshark I/O statistics

0

Hey there,

is there any way I can specify the

tshark -r file.pcap -qz "io,stat,1,AVG(tcp.analysis.ack_rtt)tcp.analysis.ack_rtt"

output, to 1. give me absolute time intervals and 2. give me more than milliseconds as a resolution for the AVG values?

thx as always in advance

asked 05 Jan '12, 09:14

Landi's gravatar image

Landi
2.3k●5●14●42
accept rate: 28%

edited 05 Jan '12, 19:22

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k●3●35●196

One Answer:

1

(1) is not currently possible. Bug 1850 has been asking for that functionality since 2007. (It just needs someone to implement it.)

For (2) you can upgrade to 1.7.0 (or the SVN trunk) and io,stat will give you microseconds.

answered 05 Jan '12, 10:45

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k●5●72
accept rate: 27%