Revision history [back]

Revision 1

answered 2022-12-13 09:40:54 +0000

Wireshark looks for the TZ environment variable to use as a timezone, this will overrule the system setting. Do you by any chance have a TZ variable on your system?

sake@MacAir13:~/_tmp$ tshark -ta -c 1 -r c.pcap 
    1 04:46:52.951583 117.149.20.209 → 124.239.228.16 TCP 68 61042 → 80 [SYN] Seq=0 Win=42340 Len=0 MSS=1460 SACK_PERM=1 WS=2048
sake@MacAir13:~/_tmp$ TZ=Europe/Dublin tshark -ta -c 1 -r c.pcap 
    1 03:46:52.951583 117.149.20.209 → 124.239.228.16 TCP 68 61042 → 80 [SYN] Seq=0 Win=42340 Len=0 MSS=1460 SACK_PERM=1 WS=2048
sake@MacAir13:~/_tmp$ TZ=Europe/Athens tshark -ta -c 1 -r c.pcap 
    1 05:46:52.951583 117.149.20.209 → 124.239.228.16 TCP 68 61042 → 80 [SYN] Seq=0 Win=42340 Len=0 MSS=1460 SACK_PERM=1 WS=2048
sake@MacAir13:~/_tmp$