Wireshark · Wireshark-users: [Wireshark-users] Fw: Re: Strange Delta Time

[Frank Pall <fpall77@xxxxxxxxx>]

--- On Sun, 1/18/09, Frank Pall <fpall77@xxxxxxxxx> wrote:

From: Frank Pall <fpall77@xxxxxxxxx>
Subject: Re: [Wireshark-users] Strange Delta Time
To: "Sake Blok" <sake@xxxxxxxxxx>
Date: Sunday, January 18, 2009, 5:23 PM

Hello and thanks for your reply,
the only filter i'm using has the simple rule to visualize only UDP traffic,and i have already added the Delta Time column.I attach the debug output and the screenshots of the two sniffer programs i have used.

In the test,i have set the timer interval to 10 milliseconds,being aware that the minimum timer resolution of windows XP is about 16 miliseconds.
PacketMon and the Debug output show similar results (packets sent every 16 milliseconds);wireshark shows a time difference approximately equal to 6.6 milliseconds.
Probably i am making some silly mistake,or misunderstanding what i see...



--- On Sun, 1/18/09, Sake Blok <sake@xxxxxxxxxx> wrote:

From: Sake Blok <sake@xxxxxxxxxx>
Subject: Re: [Wireshark-users] Strange Delta Time
To: fpall77@xxxxxxxxx, "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx>
Date: Sunday, January 18, 2009, 10:24 AM

On Sun, Jan 18, 2009 at 06:48:12AM -0800, Frank Pall wrote:
>    i am using wireshark 1.0.5 to capture traffic from a program i am
writing  
>    in VB6.                                                                
   
>    In this program,i need to generate a packet every 10ms,but,during my   
   
>    tests,i am noticing that the Delta Time of each generated packet is
about  
>    half of the real one (which i print out in the VB debug window).       
   
>    I also monitored the traffic with another software (AnalogX            
   
>    PacketMon),which seems to show a delta time more consistent with the
one i 
>    can see in my debug session. 
 
                                         
   
>    Am i doing something wrong? Is it related to some wireshark setting?   
   

Were you using a display filter to display only the packets that were
generated by your program? In that case, you might have chosen the
"Delta Time" option for your column. This is the time between the
packet
and the packet before this packet in the capture file. If you want to
see the delta time between displayed packets, you need to use "Delta
Time Displayed" instead.

If this is not the case, could you attach a small capture file to your
reply in which this problem is visible? Preferably accompanied by the
timestamps from your debug window.

Cheers,
    Sake

Attachment: wireshark-packetmon.JPG
Description: JPEG image

'Debug output.Every line corresponds to a packet sent with UDP,
'in the format HH:MM:ss.mm (mm = milliseconds)


22:59:18.593
22:59:18.609
22:59:18.625
22:59:18.640
22:59:18.656
22:59:18.671
22:59:18.687
22:59:18.703
22:59:18.718
22:59:18.734
22:59:18.750
22:59:18.765
22:59:18.781
22:59:18.796
22:59:18.812
22:59:18.828
22:59:18.843
22:59:18.859
22:59:18.875
22:59:18.890
22:59:18.906
22:59:18.921
22:59:18.937
22:59:18.953
22:59:18.968
22:59:18.984
22:59:19.0
22:59:19.15
22:59:19.31
22:59:19.46
22:59:19.62
22:59:19.78
22:59:19.93
22:59:19.109
22:59:19.125
22:59:19.140
22:59:19.156
22:59:19.171
22:59:19.187
22:59:19.203
22:59:19.218
22:59:19.234
22:59:19.250
22:59:19.265
22:59:19.281
22:59:19.296
22:59:19.312
22:59:19.328
22:59:19.343
22:59:19.359
22:59:19.375
22:59:19.390
22:59:19.437
22:59:19.453
22:59:19.468
22:59:19.484
22:59:19.500
22:59:19.515
22:59:19.531
22:59:19.546
22:59:19.562
22:59:19.578
22:59:19.593
22:59:19.609
22:59:19.625
22:59:19.640
22:59:19.656
22:59:19.671
22:59:19.687
22:59:19.703
22:59:19.718