Ask Your Question
0

Export file Wrong modify date

asked 2021-06-22 12:51:04 +0000

RedDog gravatar image

When I export specific packets to a file, the date of the file modification is wrong. It should be 6/22/21 but is 10/31/2007. The time stamp on the bytes is correct, just not on the file. All other windows apps are saving files with the correct date How do I fix this problem

edit retag flag offensive close merge delete

Comments

Works for me, what's your Wireshark version? Post the info from the Help -> About Wireshark -> Wireshark dialog.

grahamb gravatar imagegrahamb ( 2021-06-22 14:00:14 +0000 )edit

My version; Version 3.4.6 (v3.4.6-0-g6357ac1405b8)

RedDog gravatar imageRedDog ( 2021-06-22 14:06:37 +0000 )edit

Can you post the full info section or at least the "Running on" section. Is Wireshark running in a VM or container that might have a different time set? Saving to local disk, network share, NAS?

Chuckc gravatar imageChuckc ( 2021-06-22 14:33:31 +0000 )edit

The info:

Version 3.4.6 (v3.4.6-0-g6357ac1405b8) 

Copyright 1998-2021 Gerald Combs <[email protected]> and contributors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.html> This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 5.15.2, with libpcap, with GLib 2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos, with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled resampler), with Minizip ...
(more)
RedDog gravatar imageRedDog ( 2021-06-22 15:04:05 +0000 )edit

Time on the NAS is correct? I just did an export to a Synology and timestamps look good. It and the exporting system are using NTP so system times on both are pretty close.

Chuckc gravatar imageChuckc ( 2021-06-22 15:21:10 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-06-22 16:24:23 +0000

RedDog gravatar image

The NAS time was not correct, setting it corrected the problem. Didn't know the NAS had time keeping. Is there a way to make Wireshark use computer time for export vs. device time? We did have a power outage recently. Thanks for the help

edit flag offensive delete link more

Comments

I think the time given to the files depends on the receiving filesystem i.e. the NAS. Nothing much Wireshark can do about it.

grahamb gravatar imagegrahamb ( 2021-06-22 17:03:53 +0000 )edit

The NAS time was not correct, setting it corrected the problem. Didn't know the NAS had time keeping.

The local file systems used by file servers generally support storing time stamps for files, because the clients expect that. This requires the servers to do time keeping.

Is there a way to make Wireshark use computer time for export vs. device time?

No. Applications generally assume that the file system to which they're writing - whether local or remote - will take care of time stamps. I have no idea why the other apps are explicitly setting the time stamp, as that's the only way they're going to get the correct time stamp if the NAS box's time is wrong.

Guy Harris gravatar imageGuy Harris ( 2021-06-22 17:21:36 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-06-22 12:51:04 +0000

Seen: 170 times

Last updated: Jun 22 '21