Wireshark mailing list archives
Re: changing the time
From: Natalie Shapira <nd1234 () gmail com>
Date: Thu, 31 Jan 2013 07:42:33 +0200
Thanks. Eventually I override pinfo->fd->rel_ts pinfo->fd->del_dis_ts It looks good. If I would have problems again, I will create separate column. BTW, can you think about dissector who did it (adding column)? so I could use it as an example.. Natalie. On Wed, Jan 30, 2013 at 2:44 PM, Evan Huus <eapache () gmail com> wrote:
You can add the new timestamp as a regular dissected field. Wireshark allows you to create columns out of arbitrary fields in dissected packets. Cheers, Evan On Wed, Jan 30, 2013 at 4:51 AM, Natalie Shapira <nd1234 () gmail com> wrote:Anyway, you gave me other idea. What about making new column ofmy_timestampand sort by that column... Do I have the ability to add a new columnfrom adissector? On Wed, Jan 30, 2013 at 11:46 AM, Natalie Shapira <nd1234 () gmail com>wrote:I have no choice. It's a workaround for a hardware bug. On Wed, Jan 30, 2013 at 11:05 AM, Anders Broman <anders.broman () ericsson com> wrote:Hi, Those are the timestamps of packet arrival there should be no need to change them from a dissector - sounds like a bad idea to me. Regards Anders ________________________________ From: wireshark-dev-bounces () wireshark org [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of NatalieShapiraSent: den 30 januari 2013 09:16 To: wireshark-dev () wireshark org Subject: [Wireshark-dev] changing the time Hi everybody, It's my first question so, nice to meet you! I'm writing new dissector (plugin). I want to change the time of the packet. I tried to change pinfo->fd->rel_ts.secs and pinfo->fd->rel_ts.nsecs.Itlooks like I did it BUT, after sorting, not all packets are in theexactplace. Do you have an example, idea or any recommendation? Thanks, Natalie.___________________________________________________________________________Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe___________________________________________________________________________Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org ?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- changing the time Natalie Shapira (Jan 30)
- Re: changing the time Anders Broman (Jan 30)
- Re: changing the time Natalie Shapira (Jan 30)
- Re: changing the time Natalie Shapira (Jan 30)
- Re: changing the time Evan Huus (Jan 30)
- Re: changing the time Natalie Shapira (Jan 30)
- Re: changing the time Martin Mathieson (Jan 31)
- Re: changing the time Natalie Shapira (Jan 31)
- Re: changing the time Natalie Shapira (Jan 30)
- Re: changing the time Anders Broman (Jan 30)