OSQA is unmaintained. Help us figure out where to go from here.


I couldn't find any help for this on the Internet and here so here I go !

Some of my profiles have the Delta and TCP Delta columns. They both have a display format of nanoseconds, which is unneccessary to me. It's not much, but it would be cleaner for me if it stopped at milliseconds.

My regular time colums can be easily changed via 'View - Time display format' , but I'm really looking for time format for these 2 specific columns.

Is there a way I can do this ?

Thanks for your help

asked 03 May, 12:09

jerioux's gravatar image

accept rate: 0%

edited 03 May, 12:10

You can add an additional "Delta time" column. To do so go to 'Preferences' -> 'Appearance' -> 'Columns'. Click the '+' and in 'Type' drop-down list choose 'Delta time displayed' or 'Delta time'.

These two types respect the configured time display format.

For 'TCP Delta' I'm not sure which field you mean.

permanent link

answered 04 May, 11:15

Uli's gravatar image

accept rate: 28%

You solved my issue for the Delta!

I found something really interesting following that:

I used to have a column that was custom type with field name: frame.time_delta. This does EXACTLY the same job as the type 'Delta Time like you suggested but the latest is working with the timestamps we use. The one I used was stucked on nanoseconds. I corrected my column and it's now showing in milliseconds.

For the TCP Delta, I meant the filter: tcp.time_delta I search for that column in the type ''Delta time(conversation)'' but nothing is displayed. I found out on the internet this is a known bug in Wireshark. So I'll just have to work with it at a nano level.

It seems like whenever we are using ''custom'' type with a specific filter related to time, the timestamps are always at nano.

(04 May, 11:48) jerioux

For TCP Delta time you need to go to Packet Detail in the main Wireshark window. Right click on Transmission Control Protocol--> Protocol Preferences --> Calculate Conversation Time Stamp

When you enable the above option, you will see an additional field "Timestamp" in the Detail section alt text

Select the second option Time Since Previous Frame in this TCP stream--> Right click --> Apply As column

Keep the Time Column, Time Delta and TCP Delta column Adjacent to each other for ease of use and viewing

Hope that helps

permanent link

answered 04 May, 20:42

deepacket's gravatar image

accept rate: 0%

Hello Deepacket,

I already have this column, the same way you explained :) However the problem I reported for this specific column is that it goes up to nano seconds, and it's impossible to put it in milliseconds like the other Delta columns, which follows the time reference.

Have a nice day,

(05 May, 05:24) jerioux
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 03 May, 12:09

question was seen: 728 times

last updated: 13 Jul, 02:54

p​o​w​e​r​e​d by O​S​Q​A