Ask Your Question

what is the difference between frame.time_delta and frame.time_delta_displayed?

asked 2019-04-14 06:51:10 +0000

mdameen.pasha2 gravatar image

updated 2019-04-14 20:26:25 +0000

grahamb gravatar image

what is the difference between frame.time_delta and frame.time_delta_displayed?

edit retag flag offensive close merge delete

2 Answers

Sort by » oldest newest most voted

answered 2019-04-14 08:52:58 +0000

Jasper gravatar image

It's only relevant when filters are applied. frame.time_delta will still show the delta time of a frame to its predecessor even when it has been hidden by the filter, giving you wrong readings. frame.time_delta_displayed will show the delta time to the previous displayed frame instead.

I usually only use frame.time_delta_displayed and have no use case example where frame.time_delta would be the better choice.

edit flag offensive delete link more


Thanks Jasper that was helpful

mdameen.pasha2 gravatar imagemdameen.pasha2 ( 2019-04-14 17:56:01 +0000 )edit

answered 2019-04-14 17:36:05 +0000

Jim Aragon gravatar image

Either field can be used as a column and they will behave exactly as @Jasper said, but also, frame.time_delta_displayed cannot be (successfully) used in a display filter. Display filters change what is displayed, but frame.time_delta_displayed is based on what is displayed, so you end up with a circular reference. Wireshark won't show an error, but a comparison will not show any packets, regardless of what value you're comparing to. So you would think that "frame.time_delta_displayed > 0" would match all packets, but in fact it will show _no_ packets.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2019-04-14 06:51:10 +0000

Seen: 3,677 times

Last updated: Apr 14 '19