Re: timestamp fields and RTT calculation

[Martin Visser <martinvisser99 () gmail com>]

RTT is the difference in capture time of TCP frames with a certain SEQ and
then corresponding followup ACK from the receiver. (Unfortunately sometime
Wireshark gets this wrong particularly where later where zero length
segments are involved.)

Regards, Martin

MartinVisser99 () gmail com


On Sat, Dec 5, 2009 at 2:32 AM, hne <haneugen () yahoo de> wrote:

> Hi,
>
> again a question about tshark, are there fields containing the TSval and
> TSecr Values which are part of the Timestamp option, which could be added to
> the field list using
> tshar -r File -T fields -e ... ?
>
> Furthermore how does tshark calculate the value of tcp.analysis.ack_rtt?
>
> Cheers.
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe