Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

If you look at the Wireshark filter manual page you'll find:

Date and time values can be given in ISO 8601 format or using a legacy month-year-time format:

"Sep 26, 2004 23:18:04.954975"

The 'T' separator in ISO 8601 can be omitted. ISO 8601 supports timezone designators as UTC or an offset from UTC. Legacy formats can append the value "UTC" at the end to specify time in Coordinated Universal Time. Otherwise date and time values are interpreted as local time.