Yeah, pcap format doesn't store timezone info. Other capture formats
might. Which are you using?
On Mon, Apr 12, 2010 at 7:31 PM, M Holt <m.iostreams@xxxxxxxxx> wrote:
> Packet captures taken with Wireshark, are recorded internally in UTC format,
> not with the original timezone.
>
> http://www.wireshark.org/docs/wsug_html_chunked/ChAdvTimezones.html
>
> -- Mike
>
> On Mon, Apr 12, 2010 at 2:19 AM, Boaz Galil <boaz20@xxxxxxxxx> wrote:
>>
>> Hi,
>>
>> Is there are way to extract the time zone from the packet capture? (the
>> time zone of the machine that the packet was captured).
>>
>>
>>
>> Thanks in advance,
>>
>> --
>> Boaz.
>>
>>
>> ___________________________________________________________________________
>> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
>> Archives: http://www.wireshark.org/lists/wireshark-users
>> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>>
>> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
>
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
