In the same frame, what factors are affected by the difference between "Time since previous frame in this TCP stream" and "Time since request"?

asked 2022-12-03 14:33:18 +0000

walker2022
1

I have a file that needs to be analyzed. In the same frame, I found that there is a difference of 30ms between tcp.time_delta and the time of http.time. questions: What factors affect this difference, and is it related to memory, operating system, and system tcp kernel parameters?

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2022-12-03 19:28:32 +0000

André

176 ●63 ●3

TCP and HTTP are two different protocols. Each with its own timimg.

For example tcp.time_delta can refer to the previous TCP-ACK, while http.time can refer to the previous HTTP request in another (earlier) packet than the TCP-ACK.

If you filter on http then the TCP-ACKs are not shown, filter on tcp.stream instead.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

2 followers

Stats

Asked: 2022-12-03 14:33:18 +0000

Seen: 89 times

Last updated: Dec 03 '22

Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.

In the same frame, what factors are affected by the difference between "Time since previous frame in this TCP stream" and "Time since request"? edit

1 Answer