Recorded packet time stamps drift from system time with Wireshark release 3.0 and later
Hello,
On a Windows system we are using Wireshark (with WinPCAP) to record UDP packets transmitted by our system. It allows us to then compare time of the transmission with the recording time. With recent Wireshark release (I tested several version in 3.6 branch) we have a time drift like Wireshark is not using the system time which is synchronyzed using local NTP server. I tried an old version (1.12.X) and the problem is not present.
While looking on internet I found a registry key tp update (TimestampMode to 2) but it's only working for Wireshark 1.12, not for 3.6.X.
An idea ?
Thanks.
David
Comments