Furthermore, it only concerns response time and tells us nothing about which SQL was executed. I have to admit that this is a little bit tricky and there may be better solutions to this issue (Python maybe?). Delete the orginal “Server Time(ms)” columnĬtrl + Shift + Down Arrow to select the whole column, or simply input: Alt, e, s to activate “selective paste” window, select values.ġ6. Thus at this point we need to copy the whole column into a new column.ġ5. We cannot sort the column with formulas that have references to other columns. Copy the format to all the remaining cells in the same columnġ4. Modify display format for the cell in step 9:Īfter Clicking Yes, display format will change from 00:00:000 to 0.ġ3. Copy the above fomula to an empty cell and input 00:00:00.001 into the same new cell, say N1 # If three conditions are true, Compute the time differenceġ0. # G2=G3 : Previous Src Port is the same as the current Src port Add the following formula “Server Time(ms)”: Add a Column after Column Time, which is used to look at request and response time differences.ĩ. Sort data by Client IP, Src Port and No.Ĩ. Set time display format : custom -> hh:mm:ss.000Ĭlient IP : if(H2=1521,C2,D2) (H2 is Dst Port, C2 is Source, D2 is Destination)Ĭlient Port : if(H2=1521,G2,H2) (H2 is Dst Port, G2 is Src Port, H2 is Dst Port)Ĭopy the format to all the remaining cells.ħ. No., Time, Source, Destination, Src Port, Dst Port, Protocol, Infoįile -> Export Dissected Result -> As CSVĥ. Open the pcap file in Wireshark, make sure the following columns are displayed: But I guess this also works for Oracle and, more generally, ALL client/server (request/response) time model analysis.ġ. The author was analyzing performance of SQL Server.

I have run into this problem several times and luckily I found the tutorial on youtube to resolve it with WireShark and Excel. I have a pcap network capture file which contains interactions between DB and client and the question is, how can I analyze the response time for all db requests to verify that db responded within reasonable time limit?

What is wireshark time in