Wireshark mailing list archives
Wireshark and Timestamps
From: d.j.s.legge () reading ac uk
Date: 25 Oct 2009 15:58:58 +0000
Can I please confirm that the timestamps used by Wireshark:
frame_time - This is the actual date/time (as presented by the local
computer clock) to Wireshark for stamping e.g. num 1. Apr 23 2009
17:34:49.861864000 num 2. Apr 23 2009 17:34:49.861942000 num 3. Apr 23 2009
17:34:49.861979000
frame_time_delta - This is the time gap between the end of frame x and the
start of frame y. In example below there is 0.000037 seconds between the
end of frame # 2 and the start of frame #3 num 1. 0.000000 num 2. 0.000078
num 3. 0.000037
frame_time_relative - This is essentially frame time sigma. That is the
cumulative time of all frame (packets) from the first capture at 0.000000
num 1. 0.000000 num 2. 0.000078 num 3. 0.000115
The question is how does one confirm the exact frame transport time less
the time_delta? I want to be able to measure the exact period of time that
it takes a frame to transition the NIC and want any time_delata as a
seperate reading
thanks
Doug
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users () wireshark org>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Wireshark and Timestamps d . j . s . legge (Oct 26)
- Re: Wireshark and Timestamps Guy Harris (Oct 26)
- <Possible follow-ups>
- Wireshark and Timestamps d . j . s . legge (Oct 26)
- Re: Wireshark and Timestamps Guy Harris (Oct 26)
