could not see the http.time from a sliced trace

asked 2019-05-09 07:04:56 +0000

kimp
1 ●2 ●1

updated 2019-05-09 07:06:06 +0000

I got two traces and both trace captured with 128 byte slice option. And i tried to find the http.time(time since request) values under http header.

But i only could see it from only a trace. i'd like to know the condition to display the http.time values on wireshark(version 3.x) Please check it and help me.

Comments

Can you provide us a trace?

Christian_R ( 2019-05-09 15:41:08 +0000 )edit

I uploaded the trace files which can see the http.time values or not. Please check the 'http://tinyw.in/OxR3' link and help me.

kimp ( 2019-05-11 07:00:43 +0000 )edit

Clearly something throws off the request / response tracking. This would be a good test case for a bug report.

Jaap ( 2019-05-11 08:01:17 +0000 )edit

add a comment

answered 2019-05-09 20:53:49 +0000

SYN-bit

18344 ●9 ●301 ●255 https://SYN-b.it

Slicing itself does not prevent the calculation of the "http.time" field. I just tested it on Wireshark 3.0.1 and it works fine. So it is either something in your preferences or in the particular tracefile.

Could you rename your preferences directory so wireshark can't see it and try again? The preferences directory can be found by going to "About Wireshark" and then to "Folders". It is then listed under "Personal configuration".

If that does not solve the issue, it must be something within the tracefile. In that case the only way to help you is if you can upload the tracefile to a public file sharing service and provide the link (assuming there is no sensitive data in the trace).

edit flag offensive delete link

Comments

Thank you for the update. I also think this issue may relate with trace file. Sorry i have not the point to upload the trace file now . And i can share it If you share your e-mail address.

kimp ( 2019-05-09 23:55:01 +0000 )edit

You can upload the capture to any public file sharing service, e.g. Google Drive, DropBox etc. and post a link to the file back here, either by editing your question, or adding a comment.

grahamb ( 2019-05-10 08:55:27 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

could not see the http.time from a sliced trace

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

could not see the http.time from a sliced trace edit

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

could not see the http.time from a sliced trace