 | 1 | initial version |
Regarding the exceeding bandwidth, how did you capture the packets? If it was not on a specialized capture system, than chances are great that the timestamping is off. On a general system, packets get queued for a while and then processed all in one go. As the timestamping is done after the queuing you can see packets having delta timestamps that are not physically possible. Like on 1 Gbit/s each full-size packet should be about 12,5 microseconds apart, but I often see 2 microseconds delta time for a few packets and then a larger delta. So in the short interval that only contains the packets with the 2 microsecond intervals, the shown bandwidth in the IO graph will be higher than the physical bandwidth of the link.
Regarding the 100ms{2 ?} etc, I do not see that in my Wireshark 4.4.2 on MacOS. Perhaps you can share your OS and Wireshark version information and post a screenshot somewhere and link to it here to further analyse.
