I need to find a command that acts as the "Set time for packet <x> to <date/time>" feature, which is available in Wireshark, under Edit>Time Shift on mac (or command+shift+T). All I found is "editcap -t X", nevertheless this increase or decrease the time to X for all packets.
Is it possible to do so without calculating the difference between the time in the capture and the time which I intend to put?
asked 27 Oct '17, 11:47
edited 27 Oct '17, 12:41