PCAP文件包时间混乱

Question

I have PCAP file that the times is in disarray order, if i filter all the packets via Time column i can see that the packets number is in disarray order for example it should be packet 1, 2, 3, 4, 5... but in my case i have 1, 2, 3, 4, 5, 10, 44,...

Is there a possibility to fix the file and all the packets will appear in chronological order ?

Answer 1

I infer from "the Time column" that you have Wireshark installed. Newer versions of Wireshark include a command-line program named reordercap , which reads a capture file, sorts the packets by time stamp, and writes out a new file. Use that on the file, and then read the new file.