Revision history [back]

Hi Glenn,

Time Shift allows you to "shift" the timestamp on captured packets.

This is helpful when looking at capture files across time zones. (This is one example.)

You look at a capture (PCAP) done in UTC 0 but you are in UTC +5.

Time shift allows you to shift all timestamps by five hours so that you are looking at timestamps for your time zone.

Did you look at Time Display Format?

Go to View -> Time Display Format

It's possible you are seeing the time column as "Seconds Since Beginning of Capture" (CTRL+ALT+4)

If that is the case try to use "Date and Time of Day" (CTRL+ALT+1) or simply "Time of Day" (CTRL+ALT+2)

Hope this helps.

Cheers,

JFD