Wireshark Time Column: How to Use Packet Timing for Network Troubleshooting (Chris Greer)

Hey Packet People!

When troubleshooting a network problem with Wireshark, it is easy to concentrate on packet addresses, protocols, and conversations while overlooking one of the most useful pieces of information on the screen: time. The Time column can tell you much more than simply when a packet was captured. With the right configuration, it can help reveal delays, gaps in communication, retransmissions, and the sequence of events that led to a problem. If you are trying to understand why an application feels slow or why a TCP conversation is taking longer than expected, packet timing can be a very useful clue.

Wireshark Name Resolution: Make IP Addresses Easier to Understand (Chris Greer)

If you've ever opened a large Wireshark capture and found yourself staring at thousands of IP addresses, you already know how difficult packet analysis can become. Trying to remember which address belongs to a server, workstation, router or application can quickly turn a simple troubleshooting job into a spreadsheet exercise. That's where Wireshark Name Resolution can make a big difference. Instead of displaying only numerical addresses, Wireshark can translate addresses into hostnames, making a packet capture much easier to read and understand. It doesn't change the traffic in the capture—it simply makes the information already being displayed more useful to the person analyzing it.

How to Decrypt TLS Traffic in Wireshark Using Session Keys (Chris Greer)

Chris Greer’s walkthrough on decrypting HTTPS traffic in Wireshark is one of those rare tutorials that makes a pretty intimidating topic feel surprisingly doable. He breaks down how TLS 1.3 session keys work, why you normally can’t peek inside encrypted packets, and how a simple environment variable on Windows lets you capture those keys right from your browser. It’s approachable, but still nerdy enough to scratch that packet‑analysis itch.

The core trick is setting the SSLKEYLOGFILE environment variable so Chrome writes out the session keys as it negotiates TLS. Once you’ve got that log file, Wireshark can use it to decrypt the encrypted streams in real time. Chris walks through the exact steps—Control Panel, Advanced System Settings, Environment Variables—and shows how to plug the keylog into Wireshark’s TLS preferences. If you’ve ever wanted to see what’s actually happening inside HTTPS without guessing, this is the cleanest path in.

Wireshark Tutorial - Find TCP Delays (Chris Greer)

Chris Greer’s Wireshark Tutorial: Fixing Slow Applications is a sharp, practical walkthrough that shows you how to pinpoint performance bottlenecks within your  trace files. The video focuses on a clever filtering technique Greer uses to quickly isolate slow connections—an approach that saves time, cuts through noise, and helps you zero in on the real pain points. If you’ve ever stared at a huge capture file wondering where to begin, this tutorial gives you a clear, confident starting point.