Re: [Ethereal-users] Quick packet marking questions

[Gerald Combs <gerald@xxxxxxxxxxxxx>]

Darren Mease wrote:
> Is there any way to mark packets based on time, ie all packets seen
> between 0 and 20 seconds, mark these packets?  I cant seem to find any
> way to do this.

Assuming you don't have any time references set, you could do the following:

  1) Apply the display filter "frame.time_relative < 20"
  2) Select "Edit->Mark All Packets"
  3) Clear your display filter

...after you've upgraded to Wireshark, of course.  :)