Wireshark · Wireshark-dev: [Wireshark-dev] frame_data.abs_ts and pcap timestamp reference

ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] frame_data.abs_ts and pcap timestamp reference

From: "RUOFF LARS" <Lars.Ruoff@xxxxxxxxxxxxxxxxxx>

Date: Wed, 9 Dec 2009 15:32:32 +0100

Hi,
a quick question:
Is frame_data.abs_ts /* Absolute timestamp */ given in UTC or local
time?
Can someone give me a hint on where to search for the code that does the
conversion before display (if any)?
Do pcap files store timestamps in UTC or local time? If UTC, do they
store the time zone?
Thanks in advance.
Lars

Follow-Ups:
- Re: [Wireshark-dev] frame_data.abs_ts and pcap timestamp reference
  - From: Guy Harris

Prev by Date: Re: [Wireshark-dev] Reassemble packets decoding - not proper
Next by Date: [Wireshark-dev] buildbot failure in Wireshark (development) on Windows-XP-Win64
Previous by thread: Re: [Wireshark-dev] Dissector development- Problem with Conversation
Next by thread: Re: [Wireshark-dev] frame_data.abs_ts and pcap timestamp reference
Index(es):
- Date
- Thread

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube