Re: Quick packet marking questions

Gerald Combs <[email protected]> Fri, 11 Aug 2006 11:33:47 -0700
Newsgroups gmane.network.ethereal.user
Message-ID <[email protected]>
-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org and subscribe to [email protected].
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-users
-------------------

Darren Mease wrote:
> Is there any way to mark packets based on time, ie all packets seen
> between 0 and 20 seconds, mark these packets?  I cant seem to find any
> way to do this.

Assuming you don't have any time references set, you could do the following:

  1) Apply the display filter "frame.time_relative < 20"
  2) Select "Edit->Mark All Packets"
  3) Clear your display filter

...after you've upgraded to Wireshark, of course.  :)