First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Can I adjust the time in a Wireshark capture to offset the differences between two computers

  • retag add tags

Okay so here is my problem, I created a capture but the laptop I captured the information on had not synced with a time server for a while and way 43 seconds ahead of the network time.

Now when I am comparing logs on the system to the Wireshark capture I have a difference in time logs. is there a way I can adjust the timestamp in Wireshark to get the two logs to marry up?

Thanks in advance.

Chris

Chriscol91's avatar
1
Chriscol91
asked 2019-01-28 17:02:34 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Fantastic thanks

Chriscol91's avatar Chriscol91 (2019-01-28 21:03:49 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

Yes, the timestamps can be adjusted by using Wireshark's "Edit -> Time Shift" feature. You can also use editcap with the -t option to adjust the time.

cmaynard's avatar
11.1k
cmaynard
answered 2019-01-28 17:51:24 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thanks for the help really appreciated :)

Chriscol91's avatar Chriscol91 (2019-01-28 21:04:27 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer