Wireshark-users: Re: [Wireshark-users] Time Display issues opening traces

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Fri, 10 Jun 2011 11:37:46 -0400
Chris Alton wrote:
Hi All,

I wanted to know if there was any way to prevent Wireshark from displaying the trace time in local time but the actual time the trace was taken. This makes analyzing traces from different time zones a complete pain. If I have logs from somebody that are in their time zone but the trace is in mine it makes it a LOT harder to find things since I have to mentally compensate for this time zone change.

If you're on a UNIX-like system, it's quite easy to change the timezone Wireshark uses. Just run Wireshark like, for example:

TZ=GMT wireshark

If you're on Windows then there is no solution currently. But there is an enhancement request for such functionality, see:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2629