hey, i have a problem with my Wireshark time display. on my local PC i can see the correct date and time. unfortunately, the wireshark is showing me the time clock above 10 hours after the local PC time and i don't know why. can you please help? asked 08 Jan '15, 05:46  Liran Pekel showing 5 of 9 show 4 more comments |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
So you're saying when you capture, the time in the packets is 10 hours after the time it should be? Or are you opening a capture taken with a different PC?
for example, lets say i am capturing a pcap file when my local PC is showing now 16:01 on January 8th. but, when i open my Wireshark on the same PC, i see 02:10 on January 9th.
What are you capturing the pcap with? Sounds like you're not using Wireshark? Could you try capturing with Wireshark itself?
when running wireshark on real time it is showing me the same incorrect time. i am using tshark, but as far as i know its a part of wireshark and please correct me if i'm wrong.
What is your
windows server 2008 standard SP2 my Timezone is GMT+2 what do you mean by local language setting? can you explain what to check?
sorry, I meant regional settings!
What ist your Wireshark version?
And have you seen this part in the Users Guide?
It's also worth considering where the trace file was created. So, for example, if the trace was captured on a machine in San Francisco and then displayed on a machine in Bucharest, the trace will have timestamps 10 hours later than those if displayed on the machine in San Francisco.