First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

could not see the http.time from a sliced trace

  • retag add tags

I got two traces and both trace captured with 128 byte slice option. And i tried to find the http.time(time since request) values under http header.

But i only could see it from only a trace. i'd like to know the condition to display the http.time values on wireshark(version 3.x) Please check it and help me.

kimp's avatar
1
kimp
asked 2019-05-09 07:04:56 +0000, updated 2019-05-09 07:06:06 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Can you provide us a trace?

Christian_R's avatar Christian_R (2019-05-09 15:41:08 +0000) edit

I uploaded the trace files which can see the http.time values or not. Please check the 'http://tinyw.in/OxR3' link and help me.

kimp's avatar kimp (2019-05-11 07:00:43 +0000) edit

Clearly something throws off the request / response tracking. This would be a good test case for a bug report.

Jaap's avatar Jaap (2019-05-11 08:01:17 +0000) edit
add a comment see more comments

1 Answer

0

Slicing itself does not prevent the calculation of the "http.time" field. I just tested it on Wireshark 3.0.1 and it works fine. So it is either something in your preferences or in the particular tracefile.

Could you rename your preferences directory so wireshark can't see it and try again? The preferences directory can be found by going to "About Wireshark" and then to "Folders". It is then listed under "Personal configuration".

If that does not solve the issue, it must be something within the tracefile. In that case the only way to help you is if you can upload the tracefile to a public file sharing service and provide the link (assuming there is no sensitive data in the trace).

SYN-bit's avatar
18.5k
SYN-bit
answered 2019-05-09 20:53:49 +0000
edit flag offensive 0 remove flag delete link

Comments

Thank you for the update. I also think this issue may relate with trace file. Sorry i have not the point to upload the trace file now . And i can share it If you share your e-mail address.

kimp's avatar kimp (2019-05-09 23:55:01 +0000) edit

You can upload the capture to any public file sharing service, e.g. Google Drive, DropBox etc. and post a link to the file back here, either by editing your question, or adding a comment.

grahamb's avatar grahamb (2019-05-10 08:55:27 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer