Ethereal-dev: Re: [Ethereal-dev] Filtering on delta time seems to produce incorrect results ..

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 18 Feb 2004 22:46:45 -0800
On Wed, Feb 18, 2004 at 03:55:51PM -0500, Junfeng Bai wrote:
> > On Thu, Jan 22, 2004 at 11:18:47PM -0800, Richard Sharpe wrote:
> > > I was trying to filter on delta time to look for packets that were
> > emitted 
> > > more than a certain time after the previous packet.
> > > 
> > > However, it does not seem to apply the delta-time calculation on the 
> > > captured packets, but the actual filtered packets, which seems
> > incorrect.
> > 
> > Well, at least for the column display, the delta time is *supposed* to
> > be the time between the current packet and the previous filtered packet
> > - the time between the current packet and the previous captured packet
> > might be the time between the current packet and some random invisible
> > packet and, as such, not necessarily meaningful.
> > 
> > The same would apply to the delta time in the dissection.
> > 
> > We could add a field for "time since previous captured packet" so that
> > can be filtered on.
> 
> I think this feature is very useful. Do you have any plan to add this
> field for "time since previous captured packet" ? Thanks!

I don't *personally* have any plans to do that; somebody else might be
planning on doing so, however.