This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

“Set time for packet” in editcap

0
1

Hi all,

I need to find a command that acts as the "Set time for packet <x> to <date/time>" feature, which is available in Wireshark, under Edit>Time Shift on mac (or command+shift+T). All I found is "editcap -t X", nevertheless this increase or decrease the time to X for all packets.

Is it possible to do so without calculating the difference between the time in the capture and the time which I intend to put?

Thank you!

asked 27 Oct '17, 11:47

paolofusc's gravatar image

paolofusc
6122
accept rate: 0%

edited 27 Oct '17, 12:41

Jaap's gravatar image

Jaap ♦
11.7k16101