
I know I can use, for example, Excel for this but I would really want to have it working in Wireshark. I've found TCPextend lua file which adds another delta column but this one shows "time since the previous packet was transmitted from the same source" so now I see "request+response" times while I only care about response times. That's why I have to order rows by tcp.stream. Without ordering though, my current delta times are incorrect as I have multiple Modbus devices so request/response packets are mixed because all those devices are communicating at the same time. The problem is when you use ordering, Delta Time displayed nor Delta Time will show the actual delta time between response/request as ordering by stream won't update those delta time values. So stream by stream (device by device), one line is a request, another one is a response (and so on). What I'm doing is ordering packets by tcp.stream and timetamps to have a clear view of every request -> response entries. I see and can identify those responses in Wireshark but I cannot clearly see the response times. I'm doing some testing with multiple Modbus TCP/IP connections and I'm interested in response times I'm getting from some devices.

Does anyone know how to display delta times between packets (line after line) BUT even after ordering rows by some column (so the delta times will be updated after the reorder)?
