In Network Monitor, how does one highlight frames with long intervals?

Background

====================

In Network Monitor Trace, all frame-related metadata (metadata) is stored in a top-level object called 'framevariable. in this object, you can access all time-related attributes, just like accessing other attributes such as frame length and Media type.

Time information is stored in the following attributes:

• FrameVariable. TimeOffset-This is an offset, and its reference is the initial timestamp recorded in the capture header.
• FrameVariable. TimeDelta-Time difference between the image and the previous frame next to the current display filter condition.
• FrameVariable. TimeDateLocalAdjusted-The time and date in the Trace are displayed based on the adjusted time zone.

Image of TimeDelta.

Note that the Time Offset Value of the 118020 frame is the same in the two images, but the Time Delta is indeed different, indicating that TimeDelta is the Time difference from the previous frame of the current frame.

 

Explanation image for TimeDateLocalAdjusted.

 

Positive Solution

======================

Use the Color Rules button

 

Add the following Color Rule

 

References

Filtering On Timestamps

Http://blogs.technet.com/ B /netmon/archive/2010/12/21/filtering-on-timestamps.aspx

 

Additional

Microsoft Research TCP Analyzer

Http://research.microsoft.com/en-us/downloads/2ff17024-7eed-43db-93eb-ab69074b0b93/