Wireshark mailing list archives
Re: FW: Accuracy of wireshark
From: Jaap Keuter <jaap.keuter () xs4all nl>
Date: Wed, 10 Oct 2012 22:31:44 +0200
Hi,I don't know of anyone who has done validation of Wireshark in this regard. Even if they did I will be thrown out, because it's the capture engine that timestamps the frames, not Wireshark. Please study the design of Wireshark[1]
and WinPcap[2] a little closer to understand the difference.As of WinPcap, again look into the documents listed[2] (you should have no problem reading them), or contact the designers at Riverbed, WinPcap home.
Thanks, Jaap [1] http://www.wireshark.org/docs/wsdg_html_chunked/ChWorksOverview.html [2] http://www.winpcap.org/docs/default.htm On 10/10/2012 09:41 AM, Marinucci Elisabetta wrote:
Dear Jaap thanks for your answer. I'd like to add some information to explain better. My accuracy can be in ms (I don't need ns) because my requirements are Delta time<= 150 ms Delta time<= 100 ms Delta time<= 50 ms My problem is only to convince other people that Wireshark is a right tool to verify that time requirements are respected. Moreover I need to convince them that we can analyze all the packets on the interface with Wireshark and analyze the TCP data field. Do you have any Test Report or papers you have written containing your results during validation of Wireshark I can use to do this? Thanks a lot for your help. Best Regards Elisabetta Marinucci Mobile: +39 335 570 9014 e-mail: elisabetta.marinucci () selexelsag com Prima di stampare questa comunicazione consideratene, per favore, l'impatto ambientale Please consider the environment before printing this email -----Original Message----- From: Jaap Keuter [mailto:jaap.keuter () xs4all nl] Sent: martedì 9 ottobre 2012 22.12 To: Developer support list for Wireshark; Marinucci Elisabetta Subject: Re: [Wireshark-dev] FW: Accuracy of wireshark Hi, If you want to have high precision guaranteed capture then go with a hardware solution. Turbocap would be something I would look at: http://www.riverbed.com/us/products/cascade/wireshark_enhancements/turbocap.php Thanks, Jaap On 10/09/2012 11:46 AM, Marinucci Elisabetta wrote:Dear all we'd like to use wireshark tool to validate our network system in terms of packets exchanged and time. We will need to verify that certain packets are exchanged and verify the time between request and response on Ethernet interface on PC with Windows server 2003 syncronized by NTP version 4 with a GPS server. Do you have any Test Report or document that qualify the tool in term of its correct work? Do you have any document or Test Report that demonstrates that wireshark is able to capture all the packets exchanged and to measure the time difference with correct accuracy? Thanks a lot for your help. Best Regards *Elisabetta Marinucci*
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- FW: Accuracy of wireshark Marinucci Elisabetta (Oct 09)
- Re: Accuracy of wireshark Anders Broman (Oct 09)
- Re: Accuracy of wireshark David Arnold (Oct 10)
- Re: FW: Accuracy of wireshark Jaap Keuter (Oct 09)
- Re: FW: Accuracy of wireshark Jakub Zawadzki (Oct 09)
- Re: FW: Accuracy of wireshark Marinucci Elisabetta (Oct 10)
- Re: FW: Accuracy of wireshark Jaap Keuter (Oct 10)
- Re: Accuracy of wireshark Anders Broman (Oct 09)