Wireshark-bugs: [Wireshark-bugs] [Bug 8647] SUM(tcp.time_delta)tcp.time_delta incorrect
Date: Tue, 14 May 2013 01:41:57 +0000

Comment # 2 on bug 8647 from
Oops, yes, that would make things easier.

Attached is a capture of a sample file SMB file copy (a different one from the
one I used for the original post):  file-copy.pcap  I'm claiming that the
output from the following two 'tshark' commands should be different.

C:\Temp>tshark -r file-copy.pcap -Y tcp.srcport==445 -qz
io,stat,0,SUM(tcp.time_
delta)tcp.time_delta

================================================
| IO Statistics                                |
|                                              |
| Interval size: 51.8 secs (dur)               |
| Col 1: Frames and bytes                      |
|     2: SUM(tcp.time_delta)tcp.time_delta     |
|----------------------------------------------|
|              |1                  |2          |
| Interval     | Frames |   Bytes  |    SUM    |
|----------------------------------------------|
|  0.0 <> 51.8 |  18972 | 26654645 | 51.831445 |
================================================

C:\Temp>tshark -r file-copy.pcap -Y tcp.dstport==445 -qz
io,stat,0,SUM(tcp.time_
delta)tcp.time_delta

================================================
| IO Statistics                                |
|                                              |
| Interval size: 51.8 secs (dur)               |
| Col 1: Frames and bytes                      |
|     2: SUM(tcp.time_delta)tcp.time_delta     |
|----------------------------------------------|
|              |1                  |2          |
| Interval     | Frames |   Bytes  |    SUM    |
|----------------------------------------------|
|  0.0 <> 51.8 |  18972 | 26654645 | 51.831445 |
================================================

C:\Temp>


You are receiving this mail because:
  • You are watching all bug changes.