Ask Your Question

Revision history [back]

Recording time drift with recent Wireshark release

Hello,

On a Windows system we are using Wireshark (with WinPCAP) to record UDP packets transmitted by our system. It allows us to then compare time of the transmission with the recording time. With recent Wireshark release (I tested several version in 3.6 branch) we have a time drift like Wireshark is not using the system time which is synchronyzed using local NTP server. I tried an old version (1.12.X) and the problem is not present.

While looking on internet I found a registry key tp update (TimestampMode to 2) but it's only working for Wireshark 1.12, not for 3.6.X.

An idea ?

Thanks.

David

click to hide/show revision 2
None

Recording time drift with recent Wireshark release

Hello,

On a Windows system we are using Wireshark (with WinPCAP) to record UDP packets transmitted by our system. It allows us to then compare time of the transmission with the recording time. With recent Wireshark release (I tested several version in 3.6 branch) we have a time drift like Wireshark is not using the system time which is synchronyzed using local NTP server. I tried an old version (1.12.X) and the problem is not present.

While looking on internet I found a registry key tp update (TimestampMode to 2) but it's only working for Wireshark 1.12, not for 3.6.X.

An idea ?

Thanks.

David

click to hide/show revision 3
None

Recording Recorded packet time stamps drift from system time on Windows with recent Wireshark release

Hello,

On a Windows system we are using Wireshark (with WinPCAP) to record UDP packets transmitted by our system. It allows us to then compare time of the transmission with the recording time. With recent Wireshark release (I tested several version in 3.6 branch) we have a time drift like Wireshark is not using the system time which is synchronyzed using local NTP server. I tried an old version (1.12.X) and the problem is not present.

While looking on internet I found a registry key tp update (TimestampMode to 2) but it's only working for Wireshark 1.12, not for 3.6.X.

An idea ?

Thanks.

David

click to hide/show revision 4
None

Recorded packet Recording time stamps drift from system time on Windows with recent Wireshark releaserelease 3.0 and later

Hello,

On a Windows system we are using Wireshark (with WinPCAP) to record UDP packets transmitted by our system. It allows us to then compare time of the transmission with the recording time. With recent Wireshark release (I tested several version in 3.6 branch) we have a time drift like Wireshark is not using the system time which is synchronyzed using local NTP server. I tried an old version (1.12.X) and the problem is not present.

While looking on internet I found a registry key tp update (TimestampMode to 2) but it's only working for Wireshark 1.12, not for 3.6.X.

An idea ?

Thanks.

David