Wireshark mailing list archives

Editcap and timestamps


From: Wu Weidong <hjazz6 () ymail com>
Date: Thu, 4 Aug 2011 23:54:05 -0700 (PDT)

Hi,

Does editcap depend on packet timestamp in anyway? I was able to extract specific packets using editcap on pcap files 
that were recorded from live traffic, but was unable to extract any packets on processed pcap files that have packet 
timestamps as 0.

Thank you.

Regards,
Rayne
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: