What is the syntax for wireshark custom column
I want to calculate the time difference between 2 consecutive packets (and apply this for the whole pcap file), and have this shown as a custom column. What is the syntax i need to use to put in the "Field name" to calculate and show this information?
Thank you!
Why do you think you need a custom column for this? You can set the time display format (View -> Time Display format) to show the delta between either the previously captured packet or the previously displayed packet.
Also you can right click that time in every packet inside the frame header and select „apply as column“