Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Network Performance Monitor (NPM) > Use time as a dispaly filter in Wireshark

Use time as a dispaly filter in Wireshark

Table of contents
Created by Con Finucane, last modified by MindTouch on Jun 23, 2016

Views: 1,307 Votes: 0 Revisions: 3

Overview

This article describes how you can use a time display filter in Wireshark to allow you to zoom in to the exact time you are interested in. 

Environment

All versions of Orion products where you need to look at a network event using Wireshark​

Steps

  1. Start the wire shark capture.
  2. In the display filter, add the following to filter between two time frames:

Filter = :      (frame.time >= "Month day, year hours:minutes:seconds" && frame.time <= "Month day, year hours:minutes:seconds")

||

    (frame.time >= "Feb 2, 2016 08:40:00" && frame.time <= "Feb 2, 2016 08:42:42")

 

 

 

 

Last modified

Tags

Classifications

Public