 | 1 | initial version |
Hi,
The best way to do this is with the original packet capture file inside Wireshark.
Wireshark will do a lot of the heavy lifting for you.
If you just have a CSV file with the default columns then you can try to calculate what time has passed between interesting packets like TCP 3-way handshake (SYN, SYN/ACK, ACK) for frames to/from the same TCP ports but you are not going to be 100% sure of your answer because you don't know what the settings were in Wireshark when the CSV was created.
And that is assuming it was generated from Wireshark to begin with: File --> Export Packet Dissections --> As CSV...
Hope this helps.
Cheers,
JFD
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
