ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] Capture start time

Date: Tue, 23 Mar 2010 18:30:09 +0100

As far as I understood it, Wireshark sets the capture start time to the moment the first packet arrives, right? So if I start the capture at time t and the first packet arrives at t+5s, the capture's start time will be initialized at t+5 (time 0.000s). Correct?

Is there a way to determine the real capture start time (not the arrival of the first packet)? E.g. from a pcap file.


Sicherer, schneller und einfacher. Die aktuellen Internet-Browser -
jetzt kostenlos herunterladen!