Hi, I tried the latest build of Wireshark and it’s solved my issue. Thanks guys for maintaining such a great tool.
“I wish every tools I’m using was as good as Wireshark, this one is simply the best.” =========================================== André Noël Analyste principal - protocoles Bell Canada / Groupe Exploitation -----Message d'origine----- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Sake Blok Envoyé : May 15, 2007 9:39 À : Community support list for Wireshark Objet : Re: [Wireshark-users] frame.delta_time display filter question On Tue, May 15, 2007 at 09:11:13AM -0400, [EMAIL PROTECTED] wrote: > > I'm using Wireshark 0.99.5 and I wanted to isolate any frame which the delta > from the previous is more > > than 5 seconds so I used this display filter: frame.time_delta > 5 but it > doesn't look to work I got > > erroneous results. Can it be caused by the fact of the calculation is from > the display and as the display refreshes > > during the filter parsing ? Yes, you are correct, the filter "frame.time_delta > 5" will display all frames that have a timestamp more than 5 seconds later than the previously *displayed* frame and not since the previously *captured* frame. > Anyone already used it ? If it was working it has been a really powerfull > and fast way to isolate or find where delays are. Actually this was solved in a recent bugfix. If you download a recent buildbot build of Wireshark, you have two following fields: - frame.time_delta -> time_delta since previous *captured* frame - frame.time_delta_displayed -> time_delta since previous *displayed* frame You can also select the two variants as columns. Hope this helps, Cheers, Sake _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
