Wireshark-bugs: [Wireshark-bugs] [Bug 8647] SUM(tcp.time_delta)tcp.time_delta incorrect
Date: Sun, 19 May 2013 22:12:52 +0000

changed bug 8647

What Removed Added
Status INCOMPLETE RESOLVED
Resolution --- FIXED

Comment # 17 on bug 8647 from
It was a good use of my time - I've never really looked at this in depth
before, so I learned a great deal.

Closing as Fixed, since the documentation confusion was a valid issue IMHO.

Evan

PS These are my exact steps to get a useful FBAR in the GUI using
file-copy.pcap:
1 Open the file
2 Verify that tcp.time_delta is being calculated by finding it in the first
packet of the capture (there's a TCP dissector preference to turn this off -
perhaps that got set somehow?)
3 Statistics -> IO Graph (the default should open to a line graph showing a
fairly even ~400 packets per second line for ~50 seconds)
4 Choose "Advanced" under Y Axis Units
5 Enter "tcp.srcport==445" in Graph 1's filter box
6 Enter "tcp.time_delta" in Graph 1's Calc (SUM) box
7 Choose FBAR as the Style for Graph 1
8 Re-click the "Graph 1" button since somewhere in there it automatically
unselected itself (step 4, I think)
9 Choose a Tick Interval of 1 Minute for the X Axis


You are receiving this mail because:
  • You are watching all bug changes.