Re: PCAP date change ?

[Salman Malik <salmanmk () live com>]

Thank you sake ! Isn't there any other way?I mean, if I could direclty put in an arbitray date, without 
predating/postdating timestamps . I don't want to do the nasty calculations time and again...

From: sake () euronet nl
Date: Sun, 7 Mar 2010 16:30:14 +0100
To: wireshark-users () wireshark org
Subject: Re: [Wireshark-users] PCAP date change ?



You can use editcap (shipped with Wireshark):
  -t <time adjustment>   adjust the timestamp of each packet;                         <time adjustment> is in relative 
seconds (e.g. -0.5).
(from editcap -h)
Cheers,

Sake

On 7 mrt 2010, at 16:08, Salman Malik wrote:hello
how can I change pcap files's date of capture ? I want to merge two files, recorded after 2 month of another...


Hotmail: Powerful Free email with security by Microsoft. Get it 
now.___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe
                                          
_________________________________________________________________
Hotmail: Trusted email with Microsoft’s powerful SPAM protection.
https://signup.live.com/signup.aspx?id=60969

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe