I've captured some pings between two computers and sorted them by "Src addr" with the time display precision set to "Microseconds" and we see:
30 2023-05-10 11:16:41.028043 192.168.1.101 192.168.1.1 ICMP 98 Echo (ping) request id=0x001d, seq=1/256, ttl=64 (reply in 31)
46 2023-05-10 11:16:42.030052 192.168.1.101 192.168.1.1 ICMP 98 Echo (ping) request id=0x001d, seq=2/512, ttl=64 (reply in 47)
So the time between item 30 and 46 is 1.0049622 seconds. If I then change the Time Display Format using "Menu -> View -> Time Display Format -> Seconds Since Previous Displayed Packet" I expect time Time column for No. 46 to display 1.002009 it doesn't, it displays 0.086390:
30 0.492581 192.168.1.101 192.168.1.1 ICMP 98 Echo (ping) request id=0x001d, seq=1/256, ttl=64 (reply in 31)
46 0.086390 192.168.1.101 192.168.1.1 ICMP 98 Echo (ping) request id=0x001d, seq=2/512, ttl=64 (reply in 47)
And 0.086390 is the time between No. 45 and 46 i.e. "Seconds Since Previous Captured Packet":
45 0.007271 fe80::ba27:ebff:fe73:ae23 ff02::16 ICMPv6 110 Multicast Listener Report Message v2
46 0.086390 192.168.1.101 192.168.1.1 ICMP 98 Echo (ping) request id=0x001d, seq=2/512, ttl=64 (reply in 47)
So this appears to be a bug in Wireshark, should I file a bug report or am I mistaken on what "Seconds Since Previous Displayed Packet" should do?
Here is the Wireshark version info from the "About" dialog box:
Version 4.0.5 (Git v4.0.5 packaged as 4.0.5-1).
Copyright 1998-2023 Gerald Combs <[email protected]> and contributors.
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
Compiled (64-bit) using GCC 12.2.1 20230201, with GLib 2.76.1, with PCRE2, with zlib 1.2.13, with Qt 5.15.9, with libpcap, with POSIX capabilities (Linux), with libnl 3, with Lua 5.2.4, with GnuTLS 3.8.0 and PKCS #11 support, with Gcrypt 1.10.2-unknown, with Kerberos (MIT), with MaxMind, with nghttp2 1.52.0, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.10.3, without libsmi, with QtMultimedia, without automatic updates, with SpeexDSP (using system library), with Minizip, with binary plugins.
Running on Linux 6.3.1-arch1-1, with AMD Ryzen 9 3900X 12-Core Processor (with SSE4.2), with 32016 MB of physical memory, with GLib 2.76.2, with PCRE2 10.42 2022-12-11, with zlib 1.2.13, with Qt 5.15.9, with libpcap 1.10.4 (with TPACKET_V3), with c-ares 1.19.0, with GnuTLS 3.8.0, with Gcrypt 1.10.2-unknown, with nghttp2 1.52.0, with brotli 1.0.9, with LZ4 1.9.4, with Zstandard 1.5.5, with light display mode, without HiDPI, with LC_TYPE=en_US.utf8, binary plugins supported.
