Bootstrap FreeKB - Wireshark - Analyze response time
Wireshark - Analyze response time

Updated:   |  Wireshark articles

Before performing the Wireshark capture, ensure that Wireshark is configured to calculate timestamps for each unique conversation, so that times are not calculated sequentially, packet by packet.

  1. In Wireshark, press Ctrl + Shift + P (or select Edit > Preferences).
  2. In the left panel, expand Protocols and select TCP.
  3. Ensure Calculate conversation timestamps is checked.


Add the tcp.time_delta column. TCP Delta Time measures how much time elapsed between the prior and current packet in the conversation.

  1. In Wireshark, press Ctrl + Shift + P (or select Edit > Preferences).
  2. In the left panel, select Columns.
  3. Select the plus icon.
  4. Change Title to TCP Delta Time.
  5. Change Type to Custom.
  6. In Fields, enter tcp.time_delta.
  7. Select OK.


Wiresharks IO Graph can be helpful to get a big picture view of the capture. In this example, it took nearly 90 seconds for a particular website to load, and the graph represents the volume of packets exchanged over the 90 second period.


On the other hand, in this capture, was requested 22 seconds after starting the capture, and it took less than 1 second to load


In this example, there is significant TCP Delta Times, and most of the packets are going to In this example, it would be good to identify the remote systems that are serving packets to, in an attempt to understand why there is latency in the transmission of data to


Did you find this article helpful?

If so, consider buying me a coffee over at Buy Me A Coffee


Add a Comment

Please enter 138e25 in the box below so that we can be sure you are a human.