Wireshark-users: Re: [Wireshark-users] Time Display issues opening traces

From: Chris Alton <enfiniti27@xxxxxxxxxxx>
Date: Fri, 10 Jun 2011 15:39:12 -0400
That method would work if I knew what timezone the trace was from but I get traces from all kinds of different Time Zones and I'd have to change that quite often.

I'm also pretty sure that Wireshark didn't used to do this in the past but I may be remembering incorrectly.

I'm also kind of confused as to why changing the times in a network trace to the local timezone would actually be of any help in the first place. I seriously tried to think of a reason and was unable to come up with anything :)



> Date: Fri, 10 Jun 2011 11:37:46 -0400
> From: jeff.morriss.ws@xxxxxxxxx
> To: wireshark-users@xxxxxxxxxxxxx
> Subject: Re: [Wireshark-users] Time Display issues opening traces
>
> Chris Alton wrote:
> > Hi All,
> >
> > I wanted to know if there was any way to prevent Wireshark from
> > displaying the trace time in local time but the actual time the trace
> > was taken. This makes analyzing traces from different time zones a
> > complete pain. If I have logs from somebody that are in their time zone
> > but the trace is in mine it makes it a LOT harder to find things since I
> > have to mentally compensate for this time zone change.
>
> If you're on a UNIX-like system, it's quite easy to change the timezone
> Wireshark uses. Just run Wireshark like, for example:
>
> TZ=GMT wireshark
>
> If you're on Windows then there is no solution currently. But there is
> an enhancement request for such functionality, see:
>
> https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2629
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe