This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi all, i have a captured file and i want to know the time when a particular packet is captured with respect to the first packet i.e. first packet is captured at 0 seconds. i am using the filter "frame.time_delta" which is giving me the time difference between two adjacent packets, but i need the absolute time. any help please!!!!

asked 08 Jun '14, 10:35

Javeeria%20Jalil's gravatar image

Javeeria Jalil
11336
accept rate: 0%


Right click the first packet and select "Set Time reference (toggle)", this will set that packet as the time reference, and wireshark will prompt you to select a suitable time format to use that, if not from the menu View | Time Display Format select "Seconds Since Beginning of Capture", and all packet times will now be relative to the previous marked packet.

permanent link

answered 08 Jun '14, 10:57

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

thanks a lot Sir, so nice of u...... actually i was mixing up few things.... ur reply helped me a lot, thanks once again

(08 Jun '14, 12:01) Javeeria Jalil

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(08 Jun '14, 12:53) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×75
×62

question asked: 08 Jun '14, 10:35

question was seen: 4,568 times

last updated: 08 Jun '14, 12:53

p​o​w​e​r​e​d by O​S​Q​A