Submit a ticketCall us

AnnouncementsAre You “Flying Blind?”

When it comes to your complex IT infrastructure, you want to ensure you have a good grasp of what’s going on to avoid any fire drills that result from guesswork. Read our white paper to learn how proactively monitoring your IT environment can help your organization while giving you peace of mind.

Get your free white paper.

Home > Success Center > Network Performance Monitor (NPM) > NPM - Knowledgebase Articles > Use time as a display filter in Wireshark

Use time as a display filter in Wireshark

Table of contents
Created by Con Finucane, last modified by MindTouch on Jun 23, 2016

Views: 3,997 Votes: 0 Revisions: 3

Overview

This article describes how you can use a time display filter in Wireshark to allow you to zoom in to the exact time you are interested in. 

Environment

All versions of Orion products where you need to look at a network event using Wireshark​

Steps

  1. Start the wire shark capture.
  2. In the display filter, add the following to filter between two time frames:

Filter = :      (frame.time >= "Month day, year hours:minutes:seconds" && frame.time <= "Month day, year hours:minutes:seconds")

||

    (frame.time >= "Feb 2, 2016 08:40:00" && frame.time <= "Feb 2, 2016 08:42:42")

 

 

 

 

Last modified

Tags

Classifications

Public