Ethereal-dev: Re: [Ethereal-dev] Filtering on delta time seems to produce incorrect results ..

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 23 Jan 2004 01:21:07 -0800
On Thu, Jan 22, 2004 at 11:18:47PM -0800, Richard Sharpe wrote:
> I was trying to filter on delta time to look for packets that were emitted 
> more than a certain time after the previous packet.
> 
> However, it does not seem to apply the delta-time calculation on the 
> captured packets, but the actual filtered packets, which seems incorrect.

Well, at least for the column display, the delta time is *supposed* to
be the time between the current packet and the previous filtered packet
- the time between the current packet and the previous captured packet
might be the time between the current packet and some random invisible
packet and, as such, not necessarily meaningful.

The same would apply to the delta time in the dissection.

We could add a field for "time since previous captured packet" so that
can be filtered on.