Wireshark-users: [Wireshark-users] rpcapd & Timestamps

From: "Keith French" <keithfrench@xxxxxxxxxxxxx>
Date: Fri, 10 Jul 2009 10:52:49 +0100
When using Wireshark to control another PC running rpcapd (both running Win32), where do the timestamps come from? I assume they are generated by the PC clock on the remote PC running rpcapd, or do they use the PC clock on the client running Wireshark?