Wireshark mailing list archives

Re: PCAP date change ?


From: Gerald Combs <gerald () wireshark org>
Date: Sun, 07 Mar 2010 10:18:40 -0800

Development versions of capinfos have the -S option, which should make 
this easier:

    −S  Display the start and end times as seconds since January 1, 1970.
        Handy for synchronizing dumps using editcap −t.


Salman Malik wrote:
Thank you sake ! Isn't there any other way?I mean, if I could direclty 
put in an arbitray date, without predating/postdating timestamps . I 
don't want to do the nasty calculations time and again...

------------------------------------------------------------------------
From: sake () euronet nl
Date: Sun, 7 Mar 2010 16:30:14 +0100
To: wireshark-users () wireshark org
Subject: Re: [Wireshark-users] PCAP date change ?

You can use editcap (shipped with Wireshark):

  -t <time adjustment>   adjust the timestamp of each packet;
                         <time adjustment> is in relative seconds (e.g. 
-0.5).

(from editcap -h)

Cheers,


Sake


On 7 mrt 2010, at 16:08, Salman Malik wrote:

    hello
    how can I change pcap files's date of capture ? I want to merge two
    files, recorded after 2 month of another...


    ------------------------------------------------------------------------
    Hotmail: Powerful Free email with security by Microsoft. Get it now.
    
<https://signup.live.com/signup.aspx?id=60969>___________________________________________________________________________
    Sent via:    Wireshark-users mailing list
    <wireshark-users () wireshark org <mailto:wireshark-users () wireshark org>>
    Archives:    http://www.wireshark.org/lists/wireshark-users
    Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
                mailto:wireshark-users-request () wireshark org?subject=unsubscribe



------------------------------------------------------------------------
Hotmail: Trusted email with Microsoft’s powerful SPAM protection. Sign 
up now. <https://signup.live.com/signup.aspx?id=60969>


------------------------------------------------------------------------

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: