Time is irrelevant in terms of the handshake. It is generated when a client legitimately authenticates with the access point. You could be listening to traffic for days or weeks and if there is no client connection then you will never capture the handshake.

That is why deauthentication is important. It allows you to forcibly kick the client from the access point and force it to reconnect, thus generating a handshake that can be captured.