Export file Wrong modify date

asked 2021-06-22 12:51:04 +0000

RedDog
1 ●4

When I export specific packets to a file, the date of the file modification is wrong. It should be 6/22/21 but is 10/31/2007. The time stamp on the bytes is correct, just not on the file. All other windows apps are saving files with the correct date How do I fix this problem

edit retag flag offensive close merge delete

Comments

Works for me, what's your Wireshark version? Post the info from the Help -> About Wireshark -> Wireshark dialog.

grahamb ( 2021-06-22 14:00:14 +0000 )edit

My version; Version 3.4.6 (v3.4.6-0-g6357ac1405b8)

RedDog ( 2021-06-22 14:06:37 +0000 )edit

Can you post the full info section or at least the "Running on" section. Is Wireshark running in a VM or container that might have a different time set? Saving to local disk, network share, NAS?

Chuckc ( 2021-06-22 14:33:31 +0000 )edit

The info:

Version 3.4.6 (v3.4.6-0-g6357ac1405b8) 

Copyright 1998-2021 Gerald Combs <[email protected]> and contributors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.html> This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 5.15.2, with libpcap, with GLib 2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos, with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled resampler), with Minizip ...

(more)

RedDog ( 2021-06-22 15:04:05 +0000 )edit

Time on the NAS is correct? I just did an export to a Synology and timestamps look good. It and the exporting system are using NTP so system times on both are pretty close.

Chuckc ( 2021-06-22 15:21:10 +0000 )edit

Thanks for the information

RedDog ( 2021-06-22 17:11:53 +0000 )edit

add a comment

Comments

I think the time given to the files depends on the receiving filesystem i.e. the NAS. Nothing much Wireshark can do about it.

grahamb ( 2021-06-22 17:03:53 +0000 )edit

The NAS time was not correct, setting it corrected the problem. Didn't know the NAS had time keeping.

The local file systems used by file servers generally support storing time stamps for files, because the clients expect that. This requires the servers to do time keeping.

Is there a way to make Wireshark use computer time for export vs. device time?

No. Applications generally assume that the file system to which they're writing - whether local or remote - will take care of time stamps. I have no idea why the other apps are explicitly setting the time stamp, as that's the only way they're going to get the correct time stamp if the NAS box's time is wrong.

Guy Harris ( 2021-06-22 17:21:36 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Export file Wrong modify date

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Export file Wrong modify date edit

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Export file Wrong modify date