Hi, I am capturing Ethernet traffic from two network adapters, in the same time. Due to some inherent lags in accessing each network adapter, some Frames are numbered in a wrong chronological order, while the time stamps are correct. The Frames can be put in the correct chronological order, by clicking on the Time Column, but the interpretation of the Frames by Wireshark is still done over the Frames Numbers. Now for the question: Is there a way of renumbering the Frames based on time stamps? asked 08 Nov '16, 00:25  c_vasiloiu |
One Answer:
You can try to use "reordercap" command-line utility for that: https://www.wireshark.org/docs/man-pages/reordercap.html answered 08 Nov '16, 00:51  Packet_vlad |
Thank you. I have tried it and it works OK for my purpose.
If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.
Also note, your "answer" has been converted to a comment as that's how this site works. Please read the FAQ for more information.