ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] PCAP date change ?

From: Salman Malik <salmanmk@xxxxxxxx>
Date: Sun, 7 Mar 2010 17:11:42 +0000
Thank you sake ! Isn't there any other way?I mean, if I could direclty put in an arbitray date, without predating/postdating timestamps . I don't want to do the nasty calculations time and again...

From: sake@xxxxxxxxxx
Date: Sun, 7 Mar 2010 16:30:14 +0100
To: wireshark-users@xxxxxxxxxxxxx
Subject: Re: [Wireshark-users] PCAP date change ?

You can use editcap (shipped with Wireshark):

  -t <time adjustment>   adjust the timestamp of each packet;
                         <time adjustment> is in relative seconds (e.g. -0.5).

(from editcap -h)



On 7 mrt 2010, at 16:08, Salman Malik wrote:

how can I change pcap files's date of capture ? I want to merge two files, recorded after 2 month of another...

Hotmail: Powerful Free email with security by Microsoft. Get it now.___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>

Hotmail: Trusted email with Microsoft’s powerful SPAM protection. Sign up now.