This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi, I am capturing Ethernet traffic from two network adapters, in the same time. Due to some inherent lags in accessing each network adapter, some Frames are numbered in a wrong chronological order, while the time stamps are correct. The Frames can be put in the correct chronological order, by clicking on the Time Column, but the interpretation of the Frames by Wireshark is still done over the Frames Numbers. Now for the question: Is there a way of renumbering the Frames based on time stamps?

asked 08 Nov '16, 00:25

c_vasiloiu's gravatar image

c_vasiloiu
11114
accept rate: 0%


You can try to use "reordercap" command-line utility for that: https://www.wireshark.org/docs/man-pages/reordercap.html

permanent link

answered 08 Nov '16, 00:51

Packet_vlad's gravatar image

Packet_vlad
4361613
accept rate: 20%

Thank you. I have tried it and it works OK for my purpose.

(08 Nov '16, 04:05) c_vasiloiu

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

Also note, your "answer" has been converted to a comment as that's how this site works. Please read the FAQ for more information.

(08 Nov '16, 04:41) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×75
×12

question asked: 08 Nov '16, 00:25

question was seen: 642 times

last updated: 08 Nov '16, 04:41

p​o​w​e​r​e​d by O​S​Q​A