Re: [Wireshark-dev] Set capture to TZ blah?

2015-03-14 Thread Pascal Quantin
2015-03-14 20:34 GMT+01:00 Jeff Morriss jeff.morriss...@gmail.com: On 03/14/2015 02:16 PM, Guy Harris wrote: On Mar 14, 2015, at 8:00 AM, Niels de Vos nde...@redhat.com wrote: When I have captures and logs that do not match the timezone, I use the TZ environment variable to read the

Re: [Wireshark-dev] Set capture to TZ blah?

2015-03-14 Thread Guy Harris
On Mar 14, 2015, at 12:34 PM, Jeff Morriss jeff.morriss...@gmail.com wrote: On 03/14/2015 02:16 PM, Guy Harris wrote: On Mar 14, 2015, at 8:00 AM, Niels de Vos nde...@redhat.com wrote: When I have captures and logs that do not match the timezone, I use the TZ environment variable to read

Re: [Wireshark-dev] Set capture to TZ blah?

2015-03-14 Thread Jeff Morriss
On 03/14/2015 02:16 PM, Guy Harris wrote: On Mar 14, 2015, at 8:00 AM, Niels de Vos nde...@redhat.com wrote: When I have captures and logs that do not match the timezone, I use the TZ environment variable to read the captures in the timezone of the logs, like: $ TZ=America/New_York

Re: [Wireshark-dev] Allowing display filters during capture

2015-03-14 Thread Sake Blok
On 13 mrt 2015, at 19:09, Guy Harris wrote: On Mar 13, 2015, at 7:22 AM, Jeff Morriss jeff.morriss...@gmail.com wrote: That will work for your purpose. The reason the check is there, however, is that most people seem to expect that applying the display filter would affect what messages

Re: [Wireshark-dev] SSL/DTLS: allow setting of app data dissector when using keylog file

2015-03-14 Thread Gianrico
Hi Peter I am sorry to resume this after a long time but i could not answer before. I do not have much knowledge of the heuristic dissectors but i suspect it might fail in case of my protocol because my protocol starts like http and then then after a couple of requests/responses it'll start

Re: [Wireshark-dev] Set capture to TZ blah?

2015-03-14 Thread Niels de Vos
On Fri, Mar 13, 2015 at 11:33:43AM -0700, Richard Sharpe wrote: Hi folks, Lots of people use Wireshark to help with problems around the world. Sometimes they have a capture from another timezone and a log file from that same timezone. The capture has time in UTC while the logs are most

Re: [Wireshark-dev] Set capture to TZ blah?

2015-03-14 Thread Guy Harris
On Mar 14, 2015, at 8:00 AM, Niels de Vos nde...@redhat.com wrote: When I have captures and logs that do not match the timezone, I use the TZ environment variable to read the captures in the timezone of the logs, like: $ TZ=America/New_York tshark -r /path/to/capture.pcap.gz or

Re: [Wireshark-dev] Set capture to TZ blah?

2015-03-14 Thread Niels de Vos
On Sat, Mar 14, 2015 at 11:16:07AM -0700, Guy Harris wrote: On Mar 14, 2015, at 8:00 AM, Niels de Vos nde...@redhat.com wrote: When I have captures and logs that do not match the timezone, I use the TZ environment variable to read the captures in the timezone of the logs, like:

Re: [Wireshark-dev] Set capture to TZ blah?

2015-03-14 Thread Guy Harris
On Mar 14, 2015, at 11:47 AM, Niels de Vos nde...@redhat.com wrote: Oh, yes indeed. Some people might still run an operating system that does not support that... A very large fraction of our user base does. I don't know whether it's a plurality or not. (Personally, I wish Windows *would*