Wireshark · Wireshark-dev: Re: [Wireshark-dev] changing the time

[Natalie Shapira <nd1234@xxxxxxxxx>]

Anyway, you gave me other idea. What about making new column of my_timestamp and sort by that column... Do I have the ability to add a new column from a dissector?

On Wed, Jan 30, 2013 at 11:46 AM, Natalie Shapira <nd1234@xxxxxxxxx> wrote:

I have no choice. It's a workaround for a hardware bug.

On Wed, Jan 30, 2013 at 11:05 AM, Anders Broman <anders.broman@xxxxxxxxxxxx> wrote:

Hi,

Those are the timestamps of packet arrival there should be no need to change them from a dissector - sounds like a bad idea to me.

Regards

Anders

---

From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Natalie Shapira
Sent: den 30 januari 2013 09:16
To: wireshark-dev@xxxxxxxxxxxxx
Subject: [Wireshark-dev] changing the time

Hi everybody,

It's my first question so, nice to meet you!

I'm writing new dissector (plugin).
I want to change the time of the packet.
I tried to change pinfo->fd->rel_ts.secs and pinfo->fd->rel_ts.nsecs. It looks like I did it BUT, after sorting, not all packets are in the exact place.

Do you have an example, idea or any recommendation?

Thanks,
Natalie.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe