title: When does Wireshark timestamp captured packets?
body: <p>when does Wireshark timestamp the packets? After fully receiving a frame? Or already at receiving the first bytes of a frame? I read the following description about <a href="http://www.wireshark.org/docs/wsug_html_chunked/ChAdvTimestamps.html" rel="nofollow">Wireshark timestamps</a> but this text only states: "While packets are captured, each packet is time stamped as it comes in". </p>
  
  <p>Consider the following scenario and an accurate OS time:</p>
  
  <p>sender ---->   Wireshark ---->   receiver</p>
  
  <p>The sender starts the transmission of the frame at time x. The frame is fully received at the receiver at time y (y = transmission start x + frame length / link speed). Will the captured frame appear in the Wireshark with a timestamp close to x or will it be y?</p>
  
  <p>Best regards, 
  Jonas</p>