Wireshark mailing list archives
Re: PCAP date change ?
From: Gerald Combs <gerald () wireshark org>
Date: Sun, 07 Mar 2010 10:18:40 -0800
Development versions of capinfos have the -S option, which should make this easier: −S Display the start and end times as seconds since January 1, 1970. Handy for synchronizing dumps using editcap −t. Salman Malik wrote:
Thank you sake ! Isn't there any other way?I mean, if I could direclty put in an arbitray date, without predating/postdating timestamps . I don't want to do the nasty calculations time and again... ------------------------------------------------------------------------ From: sake () euronet nl Date: Sun, 7 Mar 2010 16:30:14 +0100 To: wireshark-users () wireshark org Subject: Re: [Wireshark-users] PCAP date change ? You can use editcap (shipped with Wireshark): -t <time adjustment> adjust the timestamp of each packet; <time adjustment> is in relative seconds (e.g. -0.5). (from editcap -h) Cheers, Sake On 7 mrt 2010, at 16:08, Salman Malik wrote: hello how can I change pcap files's date of capture ? I want to merge two files, recorded after 2 month of another... ------------------------------------------------------------------------ Hotmail: Powerful Free email with security by Microsoft. Get it now. <https://signup.live.com/signup.aspx?id=60969>___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org <mailto:wireshark-users () wireshark org>> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe ------------------------------------------------------------------------ Hotmail: Trusted email with Microsoft’s powerful SPAM protection. Sign up now. <https://signup.live.com/signup.aspx?id=60969> ------------------------------------------------------------------------ ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- PCAP date change ? Salman Malik (Mar 07)
- Re: PCAP date change ? Sake Blok (Mar 07)
- Re: PCAP date change ? Salman Malik (Mar 07)
- Re: PCAP date change ? Gerald Combs (Mar 07)
- Re: PCAP date change ? Salman Malik (Mar 07)
- Re: PCAP date change ? Sake Blok (Mar 07)