On Wed, Mar 14, 2007 at 10:24:10AM +0100, Sake Blok wrote: > > OK, I think an extra field needs to be added to the frame-dissector so > that both delta's are available, also for filtering, searching and > coloring. It would also be nice to be able to have both fields available > for the columns in the packet-list. The two options regarding field naming > so far are: > > - use frame.time_delta_captured and frame.time_delta_displayed and drop > support of frame.time_delta to emphasize this change > > - rename the current frame.time_delta field to frame.time_delta_displayed > since this is what it currently means. Then use the field frame.time_delta > for the delta in the capture as one would expect intuitively.
I was able to build a patch for this bug over the last couple of days. I have chosen to use the second option. Also because frame.time_delta in tshark already provided the delta time between *captured* packets. Could someone review the patch (I attached it to bugzilla)? Cheers, Sake _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
