Cisco – What Does Round-Trip Max Mean?

ciscopingwireshark

6509#ping 23.6.1.111 size 500 rep 100
Type escape sequence to abort.
Sending 100, 500-byte ICMP Echos to 23.6.1.111, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100), round-trip min/avg/max = 1/2/8 ms

looking at the first packet and the last packet

tcpdump -X -vv -n -r r.pcap | grep 01:10: |  (head -n1 && tail -n1)
reading from file r.pcap, link-type EN10MB (Ethernet)
01:10:16.847774 IP (tos 0x0, ttl 255, id 6517, offset 0, flags [none], proto ICMP (1), length 500)
01:10:17.011485 IP (tos 0x0, ttl 64, id 15139, offset 0, flags [none], proto ICMP (1), length 500)

first frame arrived at 01:10:16.847774
last frame at 01:10:17.011485

>>> from datetime import datetime
>>>
>>> d1 = datetime.strptime("2222-01-01 01:10:16.8477", "%Y-%m-%d %H:%M:%S.%f")
>>> d2 = datetime.strptime("2222-01-01 01:10:17.0114", "%Y-%m-%d %H:%M:%S.%f")
>>>
>>> print(d2 - d1)

0:00:00.163700

seems that Cisco is rounding to 2 in average,

Wireshark gets closer to the python output

enter image description here

but what do they mean about 8 ms ?
the time it took from the first packet to the last packet job process time to finish?

is there any way in wireshark for obtaining this value?

Best Answer

A ping consists of an ICMP echo request from the host where you run the ping command, and it is done when that same host receives an ICMP echo reply from the target host. The time it takes for this to happen is reported as the round-trip time in ms.

The round-trip min/avg/max mean that among all the ping tests, the fastest only took 1 ms, the longest took 8 ms, and the average of all the test times was 2 ms. You may have had multiple tests which took 8 ms, but none took more than 8 ms. Of course, these numbers are rounded to the nearest ms.

Related Topic