This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi to all,

I am using whireshark wireshark 1.8.10 on centos 6.3 . I have a pcap trace that packet are not in chronological order. I want to reorder packet chronologically. Mergecap work only with ordered trace. How can I do that?

Thanks in advanced, Diana

asked 29 Sep '14, 02:30

Dianalab9's gravatar image

Dianalab9
26161620
accept rate: 0%


If you mean that the absolute time stamps of the frames are not in chronological order you can use "reordercap" to do that. Reordercap should be available in the same directory as Wireshark and mergecap.

permanent link

answered 29 Sep '14, 02:33

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

I am using version 1.8.7 (windows) and there is no reordercap; can you advice?

(29 Sep '14, 03:28) Dianalab9

My advice would be to upgrade to 1.12.1

(29 Sep '14, 03:30) Jasper ♦♦

OK, I will try. Thank you!

(29 Sep '14, 03:32) Dianalab9

If we are using Wireshark on Linux, to which version should we upgrade? We just did the update and the latest version we are using is 1.8.10. Maybe it is available only in developer version? can you advice?

(29 Sep '14, 03:48) Dianalab9

In general it is always a good idea to upgrade to the latest stable version, which is 1.12.1 right now. Depending on your Linux distribution the package management may not have that version yet, so you can either live with the one provided by your distribution, or you try to compile/install the latest stable build manually.

(29 Sep '14, 03:57) Jasper ♦♦

OK, Thank you very much!

(29 Sep '14, 04:21) Dianalab9
showing 5 of 6 show 1 more comments
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×62

question asked: 29 Sep '14, 02:30

question was seen: 2,892 times

last updated: 29 Sep '14, 04:21

p​o​w​e​r​e​d by O​S​Q​A