Re: question about timestamp

[Guy Harris <guy () alum mit edu>]

On Apr 14, 2010, at 3:27 AM, patient1985 () web de wrote:

> at the moment, I´m working with wireshark. Now I have a question about the timestamp in the wireshark record. How 
> gets wireshark this timestamp

The file is written by dumpcap if you're capturing with Wireshark; dumpcap gets it from libpcap on UN*X and WinPcap on 
Windows.

libpcap and WinPcap get it from the operating system.  Where the operating system gets it depends on which operating 
system you're using.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe