When doing analysis, time values can provide an insight into the delays in transmission. In Wireshark, there are choices as to how you want your time value displayed, which include the following:

• Seconds Since Beginning of Capture
• Seconds Since Previously Captured Packet
• Seconds Since Previously Displayed Packet

It's important to use the correct time format. In most cases, it's best to select Seconds Since Previously Displayed Packet, which will show delays whether or not you used a display filter.

Network latency and transmission errors occur on the network. Fortunately, Wireshark has a way to help identify common issues in the form of coloring rules. The following section outlines Wireshark's coloring rules and how you can use them in your analysis.