Submit a ticketCall us
Home > Success Center > Network Performance Monitor (NPM) > Use time as a dispaly filter in Wireshark

Use time as a dispaly filter in Wireshark

Table of contents
Created by Con Finucane, last modified by MindTouch on Jun 23, 2016

Views: 1,769 Votes: 0 Revisions: 3


This article describes how you can use a time display filter in Wireshark to allow you to zoom in to the exact time you are interested in. 


All versions of Orion products where you need to look at a network event using Wireshark​


  1. Start the wire shark capture.
  2. In the display filter, add the following to filter between two time frames:

Filter = :      (frame.time >= "Month day, year hours:minutes:seconds" && frame.time <= "Month day, year hours:minutes:seconds")


    (frame.time >= "Feb 2, 2016 08:40:00" && frame.time <= "Feb 2, 2016 08:42:42")





Last modified