 | 1 | initial version |
I hope you are aware of the fact that what you referring to is the _presentation_ of time, not the timestamps as they are stored with the packets. Whenever you are looking at packets in the packet list you are free to change the Time Display Format, this has no bearing on what is stored in the capture file.
In your case you could have simply changed the Time Display Format to Time of Day as see exactly when the packet was captured.
As for your suggestion, Seconds Since Beginning of Capture could be rephrased as Seconds Since First Captured Packet, but I leave that to the native speakers.
Perhaps capture start (and stop) timestamps could be added to the pcapng file format. But that's a whole other story.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
