This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark timestamp problem with 32-bit Windows 7

0

Hello,

I have installed Wireshark 1.12.1 on two machines, one with 64-bit Windows 7, and the other with 32-bit Windows 7. Both machine's dates and timezones are set correctly (Central Europe summer time, which is currently 2 hours in advance of GMT/UTC.

The 64-bit machine displays timestamps correctly, the 32-bit machine displays time delayed by 2 hours (GMT/UTC?). I've checked that the same options are displayed for both machines using "View -> Time Display Format -> Time Of Day".

When I select the "UTC Time Of Day" option, the 64-bit machine adjusts its timestamps backwards by two hours, as expected; the 32-bit machine displays the same timestamps unchanged. I've changed the 32-bit computer's timezone to use other timezones, and the timestamps remain unchanged. When I use other display formats, such as "Date (with day of year) and Time Of Day", the timestamps remain unchanged.

I've uninstalled and reinstalled the 32-bit version, but the problem is still there. Is this a bug with 32-bit Windows timestamps?

Can anyone help? Paul

asked 30 Sep '14, 10:04

polomora's gravatar image

polomora
11113
accept rate: 0%


One Answer:

1

Does the "broken" version (32 bit one) have the time column set to be "Time (format as specified)" or "UTC time" (right click the column, then select "Edit Column Details" to check). I suspect you have the latter that doesn't track the specified time format.

answered 01 Oct '14, 06:14

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

grahamb,

Many thanks, that fixed it. Confusing that it cannot be adjust from the "View -> Time Display Format -> Time Of Day" menu option. Wierd.

In any case, fixed.

Paul

(01 Oct '14, 11:28) polomora

The view option only affects those columns that use the "... as specified" type.

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(01 Oct '14, 12:05) grahamb ♦