This is our old Q&A Site. Please post any new questions and answers at

The function ProtoField.absolute_time is documented (, but may be broken in some way. At least, when I try to call it, I get an error dialogue containing the message "attempt to call field '?' (a nil value)", and pointing to the line with the absolute_time call, when starting wireshark.

I am using version 1.6.7.

Is this deliberate, or a bug?

asked 02 May '12, 04:11

Brian%20Raven's gravatar image

Brian Raven
accept rate: 0%

That function was added after 1.6 (that is, in the current trunk which is 1.7). The documentation you're looking at is probably the online WSUG which is, as per the front page, for 1.7 (not 1.6).

You might want to use the WSUG that came with your version of Wireshark (if it did, in fact, come with one).

permanent link

answered 02 May '12, 09:14

JeffMorriss's gravatar image

JeffMorriss ♦
accept rate: 27%

That explains it. I missed the "For Wireshark 1.7". I look forward to being able to add timestamps to my dissector, when 1.7 becomes stable.

Many thanks for the prompt response.

(02 May '12, 09:43) Brian Raven

As this is a Q&A site, please don't forget to Accept the answer if it answered your question--see the FAQ.

Anyway, you're welcome!

(02 May '12, 09:51) JeffMorriss ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 02 May '12, 04:11

question was seen: 2,912 times

last updated: 02 May '12, 09:51

p​o​w​e​r​e​d by O​S​Q​A