Wireshark-dev: Re: [Wireshark-dev] changing the time

From: Anders Broman <anders.broman@xxxxxxxxxxxx>
Date: Wed, 30 Jan 2013 09:05:40 +0000
Hi,
Those are the timestamps of packet arrival there should be no need to change them from a dissector - sounds like a bad idea to me.
Regards
Anders


From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Natalie Shapira
Sent: den 30 januari 2013 09:16
To: wireshark-dev@xxxxxxxxxxxxx
Subject: [Wireshark-dev] changing the time


Hi everybody,

It's my first question so, nice to meet you!

I'm writing new dissector (plugin).
I want to change the time of the packet.
I tried to change pinfo->fd->rel_ts.secs and pinfo->fd->rel_ts.nsecs. It looks like I did it BUT, after sorting, not all packets are in the exact place.

Do you have an example, idea or any recommendation?

Thanks,
Natalie.