Wireshark · Wireshark-dev: Re: [Wireshark-dev] changing the time

[Anders Broman <anders.broman@xxxxxxxxxxxx>]

Hi,

Those are the timestamps of packet arrival there should be no need to change them from a dissector - sounds like a bad idea to me.

Regards

Anders

---

From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Natalie Shapira
Sent: den 30 januari 2013 09:16
To: wireshark-dev@xxxxxxxxxxxxx
Subject: [Wireshark-dev] changing the time

Hi everybody,

It's my first question so, nice to meet you!

I'm writing new dissector (plugin).
I want to change the time of the packet.
I tried to change pinfo->fd->rel_ts.secs and pinfo->fd->rel_ts.nsecs. It looks like I did it BUT, after sorting, not all packets are in the exact place.

Do you have an example, idea or any recommendation?

Thanks,
Natalie.