On Wed, Mar 14, 2007 at 10:24:10AM +0100, Sake Blok wrote:
>
> OK, I think an extra field needs to be added to the frame-dissector so
> that both delta's are available, also for filtering, searching and
> coloring. It would also be nice to be able to have both fields available
> for the columns in the packet-list. The two options regarding field naming
> so far are:
>
> - use frame.time_delta_captured and frame.time_delta_displayed and drop
> support of frame.time_delta to emphasize this change
>
> - rename the current frame.time_delta field to frame.time_delta_displayed
> since this is what it currently means. Then use the field frame.time_delta
> for the delta in the capture as one would expect intuitively.
I was able to build a patch for this bug over the last couple of days.
I have chosen to use the second option. Also because frame.time_delta
in tshark already provided the delta time between *captured* packets.
Could someone review the patch (I attached it to bugzilla)?
Cheers,
Sake