Ask Your Question
0

Can I adjust the time in a Wireshark capture to offset the differences between two computers

asked 2019-01-28 17:02:34 +0000

Chriscol91 gravatar image

Okay so here is my problem, I created a capture but the laptop I captured the information on had not synced with a time server for a while and way 43 seconds ahead of the network time.

Now when I am comparing logs on the system to the Wireshark capture I have a difference in time logs. is there a way I can adjust the timestamp in Wireshark to get the two logs to marry up?

Thanks in advance.

Chris

edit retag flag offensive close merge delete

Comments

Fantastic thanks

Chriscol91 gravatar imageChriscol91 ( 2019-01-28 21:03:49 +0000 )edit
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-01-28 17:51:24 +0000

cmaynard gravatar image

Yes, the timestamps can be adjusted by using Wireshark's "Edit -> Time Shift" feature. You can also use editcap with the -t option to adjust the time.

edit flag offensive delete link more

Comments

Thanks for the help really appreciated :)

Chriscol91 gravatar imageChriscol91 ( 2019-01-28 21:04:27 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

subscribe to rss feed

Stats

Asked: 2019-01-28 17:02:34 +0000

Seen: 1,373 times

Last updated: Jan 28 '19