 | 1 | initial version |
I think you want the time of the first packet to display the offset from when the capture was started, rather than the current (when "Seconds Since Beginning of Capture" time format is selected) 0.000000.
Unfortunately, I don't think that's currently possible as the capture file format (pcap or pcapng) doesn't record the start time of the capture, only the timestamp of each packet.
It might be possible to add the capture start time to the capture, please raise an enhancement request on the Wireshark Bugzilla.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
