Wireshark-users: Re: [Wireshark-users] Wireshark and Observer Time

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Wed, 09 Jul 2008 09:47:15 -0400

Edouard Funke wrote:

Hi,

I have a problem with UTC/local capture time :
I captured packets with NI Observer 11 which timestamps packets with local time.
If I open the file with wireshark 1.0.0, i think it tries to convert
it to local time again (in my case , as i am in Paris, it adds 1
hour).

For example, the same packet with :
Observer, the timestamp is 07h00
Wireshark, the timestamp is 08h00

Is it a normal issue or a wireshark bug ?

It's normal: Wireshark displays times in your local time zone.

There's an enhancement request out there:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2629

to have the GUI allow you to set the timezone that Wireshark uses (at least to UTC but may to any other TZ).