Martin Regner wrote:
<I thought that it would be possible to use a filter like
<frame.time_delta < 0
<or
<!(frame.time_delta >= 0)
<but I don't get it to work (Ethereal 0.9.8, Windows 2000/98).
<
<I can filter out packets where frame.time_delta >= 0, but not the opposite.
It seems to work better with earlier versions (Ethereal 0.9.1, 0.9.5, 0.9.7):
Ethereal 0.9.8
============
frame.time_delta lt 0 (no frames shown)
frame.time_delta ge 0 (1,2,4,6,11,16,20,23,25,27,35,37 ...)
frame.time_delta eq 0 (1)
frame.time_delta ne 0 (2,3,4,5,6,7,8,9,10,11,12,13,14...) OK!
frame.time_delta gt 0 (2,4,6,11,16,20,23,25,27,35,37,40...)
(3,5,7,12,17,21,24,26,28 are shown with negative values for "Time delta from previous packet")
Ethereal 0.9.7
===========
frame.time_delta lt 0 (3,5,7,12,17,21,24,26,28 ....) OK!
frame.time_delta ge 0 (1,2,4,6,8,9,10,11,13,14,15,16,18 ...) OK!
frame.time_delta eq 0 (1) OK!
frame.time_delta ne 0 (2,3,4,5,6,7,8,9,10,11,12,13,14 ....) OK!
frame.time_delta gt 0 (2,4,6,8,9,10,11,13,14,15,16,18,19,20) OK!
(3,5,7,12,17,21,24,26,28 are shown with negative time for "Time delta from previous packet")