Wireshark-users: Re: [Wireshark-users] TCP conversation

From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Thu, 17 Apr 2008 10:50:13 -0700
Sudharsanan Ranganathan wrote:
> In a TCP conversation window, what is “Rel Start”? and what is “Duration”?
> 
> Is duration the time taken for that TCP conversation? Or Rel Start is
> the time taken for that TCP conversation?

"Rel Start" is the time in seconds between the start of the capture (packet #1)
and the start of the conversation. "Duration" is the time in seconds between the
first and last packet of the conversation.

> If a file is being downloaded using TCP, which parameter gives the time
> taken to download? Is it Rel Start or Duration?

Duration.