Wireshark-bugs: [Wireshark-bugs] [Bug 8253] "No." and Time column doesn't comparable
Date: Fri, 01 Feb 2013 16:17:55 +0000

changed bug 8253

What Removed Added
Status UNCONFIRMED CONFIRMED
CC   jeff.morriss.ws@gmail.com
Ever confirmed   1

Comment # 1 on bug 8253 from
This is a side-effect of using Wireshark's capability to capture on 2 or more
interfaces simultaneously.  The basic problem is that there is one thread per
interface working in parallel and it's really up to the OS scheduler when those
threads run and are able to write their packets to the file.

I can't see how this could be improved during capture.

There is (in the development builds of Wireshark) a command-line utility called
'reordercap' whose job is to solve this problem by re-ordering the packets
based on timestamp.

I suppose the GUI could have an option to reorder the capture file, write it
back to disk, and read it back in again (just to make it easier).

Beyond that, I think we're stuck with this... Deficiency.


You are receiving this mail because:
  • You are watching all bug changes.