Ask Your Question
0

could not see the http.time from a sliced trace

asked 2019-05-09 07:04:56 +0000

kimp gravatar image

updated 2019-05-09 07:06:06 +0000

I got two traces and both trace captured with 128 byte slice option. And i tried to find the http.time(time since request) values under http header.

But i only could see it from only a trace. i'd like to know the condition to display the http.time values on wireshark(version 3.x) Please check it and help me.

edit retag flag offensive close merge delete

Comments

Can you provide us a trace?

Christian_R gravatar imageChristian_R ( 2019-05-09 15:41:08 +0000 )edit

I uploaded the trace files which can see the http.time values or not. Please check the 'http://tinyw.in/OxR3' link and help me.

kimp gravatar imagekimp ( 2019-05-11 07:00:43 +0000 )edit

Clearly something throws off the request / response tracking. This would be a good test case for a bug report.

Jaap gravatar imageJaap ( 2019-05-11 08:01:17 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-05-09 20:53:49 +0000

SYN-bit gravatar image

Slicing itself does not prevent the calculation of the "http.time" field. I just tested it on Wireshark 3.0.1 and it works fine. So it is either something in your preferences or in the particular tracefile.

Could you rename your preferences directory so wireshark can't see it and try again? The preferences directory can be found by going to "About Wireshark" and then to "Folders". It is then listed under "Personal configuration".

If that does not solve the issue, it must be something within the tracefile. In that case the only way to help you is if you can upload the tracefile to a public file sharing service and provide the link (assuming there is no sensitive data in the trace).

edit flag offensive delete link more

Comments

Thank you for the update. I also think this issue may relate with trace file. Sorry i have not the point to upload the trace file now . And i can share it If you share your e-mail address.

kimp gravatar imagekimp ( 2019-05-09 23:55:01 +0000 )edit

You can upload the capture to any public file sharing service, e.g. Google Drive, DropBox etc. and post a link to the file back here, either by editing your question, or adding a comment.

grahamb gravatar imagegrahamb ( 2019-05-10 08:55:27 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-05-09 07:04:56 +0000

Seen: 39 times

Last updated: May 11