Wireshark · Wireshark-users: [Wireshark-users] Script/Macro to set time reference?

["Jake Peavy" <djstunks@xxxxxxxxx>]

Hey all,

I would like to collect IGMP information using Wireshark.  I'm trying to find occasions where the client does not respond to the General Query in the allocated time.

To do so I'd like to have Wireshark set each query (igmp.type == 0x11) as a time reference.  Is there a way to do this?

And, since I'm asking, if there's a way to parse the query for the IGMP maximum response time (igmp.max_resp) and identify only those membership reports (igmp.type == 0x16) which exceed this value that would be fantastic ;-)

-- 
-jp

We used to laugh at Grandpa when he'd head off and go fishing. But we wouldn't be laughing that evening when he'd come back with some whore he picked up in town.

deepthoughtsbyjackhandy.com