wireshark conversation statistics

I got the conversation statistics (see pic). There are 202 IP conversations, 416 tcp conversations, and 1043 udp conversations. I thought that tcp and udp are under IP. That is what showing under Protocol Hierarchy statistics. But looking at the conversations, the sum of conversations of tcp and udp are greater than IP conversations. Am I missing something? Thanks

pic
LVL 1
leblancAccountingAsked:
Who is Participating?
 
UnHeardOfConnect With a Mentor Commented:
if you look at the TCP/UDP tabs you will notice that you may have multiple connections ( conversations ) to the same host.
0
 
leblancAccountingAuthor Commented:
Ahhh.. That makes sense.

My duration is 160.034 for the conversation. How do I find out the unit set for the duration. I was thinking ms but I just want to confirm it. Thx
0
 
UnHeardOfConnect With a Mentor Commented:
The help documenation regarding the fields for the Conversations is based on seconds. I know you can change the time format on the actual capture itself by going to view > Time Display Format.

Conversation Help Contents

8.4.2. The "Conversations" window
The conversations window is similar to the endpoint Window; see Section 8.5.2, “The "Endpoints" window” for a description of their common features. Along with addresses, packet counters, and byte counters the conversation window adds four columns: the time in seconds between the start of the capture and the start of the conversation ("Rel Start"), the duration of the conversation in seconds, and the average bits (not bytes) per second in each direction.
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
leblancAccountingAuthor Commented:
Yes. I see it now. That is interesting because my total capture time is 12 minutes and I just saw some duration that is around 660.00. I don't think it is in seconds because it would last longer than my capture time. I don't think I changed the duration in the past because I don't know how. So this must be ms somehow.
0
 
UnHeardOfCommented:
12 minutes is 720 seconds. So that could be accurate and in seconds.
0
 
leblancAccountingAuthor Commented:
Yes you are correct. I just realized that I made a mistake in my calculation. Thx
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.