Wireshark · Wireshark-users: Re: [Wireshark-users] PCAP date change ?

[Salman Malik <salmanmk@xxxxxxxx>]

Thank you sake ! Isn't there any other way?I mean, if I could direclty put in an arbitray date, without predating/postdating timestamps . I don't want to do the nasty calculations time and again...

---

From: sake@xxxxxxxxxx
Date: Sun, 7 Mar 2010 16:30:14 +0100
To: wireshark-users@xxxxxxxxxxxxx
Subject: Re: [Wireshark-users] PCAP date change ?

You can use editcap (shipped with Wireshark):

  -t <time adjustment>   adjust the timestamp of each packet;

                         <time adjustment> is in relative seconds (e.g. -0.5).

(from editcap -h)

Cheers,

Sake

On 7 mrt 2010, at 16:08, Salman Malik wrote:

hello
how can I change pcap files's date of capture ? I want to merge two files, recorded after 2 month of another...

---

Hotmail: Powerful Free email with security by Microsoft. Get it now.___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

---

Hotmail: Trusted email with Microsoft’s powerful SPAM protection. Sign up now.