Submit a ticketCall us
Home > Success Center > Network Performance Monitor (NPM) > Use time as a display filter in Wireshark

Use time as a display filter in Wireshark

Table of contents
Created by Con Finucane, last modified by MindTouch on Jun 23, 2016

Views: 2,286 Votes: 0 Revisions: 3

Overview

This article describes how you can use a time display filter in Wireshark to allow you to zoom in to the exact time you are interested in. 

Environment

All versions of Orion products where you need to look at a network event using Wireshark​

Steps

  1. Start the wire shark capture.
  2. In the display filter, add the following to filter between two time frames:

Filter = :      (frame.time >= "Month day, year hours:minutes:seconds" && frame.time <= "Month day, year hours:minutes:seconds")

||

    (frame.time >= "Feb 2, 2016 08:40:00" && frame.time <= "Feb 2, 2016 08:42:42")

 

 

 

 

Last modified

Tags

Classifications

Public