This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I'm trying to merge different pcap files. Meanwhile, I'm trying to synchronize them and let's say I want them all to start at the 2017-01-01 00:00:00. i.e. my zero should be this date. I successfully do that with time shift tool but when I save as and reopen the same window the time shift is reset to the time before. Thank you for the help

asked 27 Mar '17, 07:30

nimaaaa's gravatar image

nimaaaa
6112
accept rate: 0%


To have a permanent time shift use the tool editcap. The options -t and/or -S are for time shifting operations.

To merge pcap files use the mergecap utility.

permanent link

answered 27 Mar '17, 12:49

Uli's gravatar image

Uli
9031515
accept rate: 29%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×75
×3

question asked: 27 Mar '17, 07:30

question was seen: 1,483 times

last updated: 27 Mar '17, 12:49

p​o​w​e​r​e​d by O​S​Q​A