Wireshark-dev: [Wireshark-dev] Display filter frame.time_delta > 0.1returns incorrect results
From: Reinhard Nissl <rnissl@xxxxxx>
Date: Sun, 16 Feb 2014 08:24:44 +0100
Hi,

when I activate the mentioned filter, I get for example these two frames reported:

Frame Number: 59662
Arrival Time: Feb 16, 2014 07:59:55.281511000 Mitteleuropäische Zeit
Time delta from previous captured frame: 40.406870000 seconds

Frame Number: 60296
Arrival Time: Feb 16, 2014 07:59:55.791893000 Mitteleuropäische Zeit
Time delta from previous captured frame: 28.907126000 seconds

They match, as the displayed Time delta from previous captured frame is larger than 0.1 seconds.

But these numbers are crap, as delta of Arrival Time is by far less then 28.907126000 seconds.

Clearing the display filter and having a look at frames 60295 and 60296 shows the following:

Frame Number: 60295
Arrival Time: Feb 16, 2014 07:59:55.788399000 Mitteleuropäische Zeit
Time delta from previous captured frame: 0.000035000 seconds

Frame Number: 60296
Arrival Time: Feb 16, 2014 07:59:55.791893000 Mitteleuropäische Zeit
Time delta from previous captured frame: 0.003494000 seconds

Feel free to request further information.

BTW:
Wireshark (64-bit) 1.10.5 (SVN Rev 54262 from /trunk-1.10)
Running on 64-bit Windows 7 Service Pack 1

Bye.
--
Dipl.-Inform. (FH) Reinhard Nissl
mailto:rnissl@xxxxxx