When performing a packet capture on an AirCheck test unit, the timestamp recorded in the packet is based on the AirCheck unit’s time settings. However, when you open the capture in Wireshark, the timestamp is interpreted as UTC/GMT by default. This can lead to confusion if your local time zone differs.
Why Does This Happen?
- The AirCheck device embeds its local time in the packet capture.
- Wireshark assumes the timestamp is in UTC/GMT and converts it to your computer’s local time zone.
- As a result, the displayed time in Wireshark may not match the time shown on the AirCheck unit.
How to Fix Timestamp Mismatch in Wireshark
To align the timestamps in Wireshark with those on your AirCheck tester:
- Open Wireshark.
- Navigate to View → Time Display Format.
- Select UTC.
This ensures that Wireshark displays the same timestamp as your AirCheck unit.
Key Takeaways
Adjust Wireshark’s Time Display Format to UTC for consistency.
AirCheck uses its local time for packet captures.
Wireshark defaults to UTC/GMT interpretation.