First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

In the same frame, what factors are affected by the difference between "Time since previous frame in this TCP stream" and "Time since request"?

  • retag add tags

I have a file that needs to be analyzed. In the same frame, I found that there is a difference of 30ms between tcp.time_delta and the time of http.time. questions: What factors affect this difference, and is it related to memory, operating system, and system tcp kernel parameters?

walker2022's avatar
1
walker2022
asked 2022-12-03 14:33:18 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

TCP and HTTP are two different protocols. Each with its own timimg.

For example tcp.time_delta can refer to the previous TCP-ACK, while http.time can refer to the previous HTTP request in another (earlier) packet than the TCP-ACK.

If you filter on http then the TCP-ACKs are not shown, filter on tcp.stream instead.

André's avatar
176
André
answered 2022-12-03 19:28:32 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer