Wireshark · Wireshark-users: Re: [Wireshark-users] rpcapd & Timestamps

[John Wang <locationdev@xxxxxxxxx>]

As I know, Wireshark itself can't generate timestamps for capture signal. The timestamp is generated by lower driver or hardware timer. In your case, I think the timestamp comes from the remote PC.

Cheers

John

2009/7/10 Keith French <keithfrench@xxxxxxxxxxxxx>

When using Wireshark to control another PC running rpcapd (both running Win32), where do the timestamps come from? I assume they are generated by the PC clock on the remote PC running rpcapd, or do they use the PC clock on the client running Wireshark?

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe