Ask Your Question

Can I adjust the time in a Wireshark capture to offset the differences between two computers

asked 2019-01-28 17:02:34 +0000

Chriscol91 gravatar image

Okay so here is my problem, I created a capture but the laptop I captured the information on had not synced with a time server for a while and way 43 seconds ahead of the network time.

Now when I am comparing logs on the system to the Wireshark capture I have a difference in time logs. is there a way I can adjust the timestamp in Wireshark to get the two logs to marry up?

Thanks in advance.


edit retag flag offensive close merge delete


Fantastic thanks

Chriscol91 gravatar imageChriscol91 ( 2019-01-28 21:03:49 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2019-01-28 17:51:24 +0000

cmaynard gravatar image

Yes, the timestamps can be adjusted by using Wireshark's "Edit -> Time Shift" feature. You can also use editcap with the -t option to adjust the time.

edit flag offensive delete link more


Thanks for the help really appreciated :)

Chriscol91 gravatar imageChriscol91 ( 2019-01-28 21:04:27 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2019-01-28 17:02:34 +0000

Seen: 1,260 times

Last updated: Jan 28 '19