How to save a Time Shift?
Time Shift is used to alter the timestamps of packets in a trace file. In 101.pcapng,the original arrival time was Jul 7, 2017 14:36:56.111000000. I have shifted the arrival time by +3.2 seconds. The new arrival time was Jul 7, 2017 14:36:59.311000000 and save it called 101new.pcapng. When I open the 101new.pcapng, I get the arrival time is the same as 101.pcapng. Although I changed the arrival time by +3.2 seconds and saved, the new arrival time return to the orignal arrival time. Why?
Thanks,
Chen Yun Long
Did you try marking all of the packets and then exporting them? Didn't try it myself, but it might be worth a try.
Neither Save-As nor Export is working on Version 3.6.0 (v3.6.0-0-g3a34e44d02c9) - I did test this. The only permanently working way is editcap mentioned below.